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UNITED STATES 
FOREIGN INTELLIGENCE SURVEILLANCE COURT 
WASHINGTON, D,C. 




MEMORANDUM OPINION 



Thèse matters are before the Foreign Intelligence Surveillance Court ("FISC" or "Court") 
on: (l) the "Government's Ex Parte Submission of Reavithorization Certification and Related 
Procédures, Ex Parte Submission of Amended Certifications, and Request for an Oïder 

Approving Such Certification and Amended Certifications" for DNI/AG 702(g) Certifications : 

i 

\ 

i 
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HHHHH^HHHB; which was filed on April 20, 2011; (2) th.e "Govemnient's Ex Parte 
Submission of Reauthorization Certification, and Related Procédures» Ex Parte Submission of 
Amended Certifications, and Request for an Order Àpproving Suoh Certification and Amended 
Certifications" for DNI/ÀG 702(g) Certifications |HHHHHHI^I^IHH& wliich 
was filed on April 22, 201 1; and (3) the "Govemmenfs Ex Faite Submission of Reauthorization 
Certification and Related Procédures, Ex Parte Submission of Amended Certifications, and 
Request for an Order Approving Such Certification and Amended Certifications 55 for DNI/AG 
702(g) CQAiilha^ wliich was also filed on April 22» 

2011. 1 

Through thèse submissions, the goveranent seeks approval of the acquisition of certain 
téléphone and Internet communications pursuant to Section 702 of the Foreign Intelligence 
Surveillance Act ("EISA" or the "Act"), 50 U.S.C. § 1 881 a, which requires judicial rcview for 
compliance witîi both statutory and constitutional requirements, For the reasons set forth below, 
the governmenfs requests for approval are granted in part and denied in part. The Court 
concludes that one aspect of the proposed collection - the "upstream collection" of Internet 
transactions containing multiple communications ~ is, in some respects, déficient on statutory 
and constitutional grounds. 



1 For ease of reference 3 the Court will refer to thèse three filings collectively as the "April 
2011 Submissions" 
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BACKGROUND 

À. The Certifications and Amendments 

The April 2011 Submissions include DN17AG 702(g) Certification | 




|, ail of which were executed by the Attorney 
General and the Director of National Intelligence ("DNI") pur suant to Section 702, 
previous certifications hâve been submitted by the government and approved by the Court 
pursuant to Section 702, 

MÊÊÊÊÊÊÊÊÊÊÊÊ/KÊÊKKÊÊÊÊÊÊÊÊBÊ^ÊIIÊÊÊKIÊÊÊ (collective^ the 
Dockets")- Each of the April 201 1 Submissions also hicludes supporting affidavits by the 
Director or Acting Director of the National Securify Agency ( ÏC NSA") 5 the Director of the Fédéral 
Bureau of Investigation ("FBI")J 

two sets of targeting procédures, for use by NSA and FBI respectively; and three sets of 
minimization procédures, for use by NSA, FBIj and CIÀ> respectively^ 2 

Lilce the acquisitions approved by the Court in the eight Prior 702 Dockets, collection 



2 The targeting and mini mization procédures accompanying Certificatio n BWi are 
identical to those accompanying ^^fl^HNHI^H^HI^HHNMii As discussed 
below* the N SA targeting procédures and FB I minimization procédures accompanying 
Certifications ^^j^gggjg^^gj^ a | g0 are ^ en ^ oa i to the NSA targeting procédures 
and FBI minimization procédures that were su bmitted by the government and approved by the 
Court for use in connection with Certifications MHflHHIHHHH- T^ 6 ^BI targeting 
procédures and the NSA and CIA minimization procédures that accompany the April 201 1 
Submissions differ in several respects ftom the corresponding procédures th at were submitted by 
the government and approved by the Court in connection with Certifications! 
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under Certifications H^HHHHI^^HI is limited to "the targeting of non-United 
States persons reasonably believed to be looated outside the United States/ 5 Certification fl 



The April 2011 Submissions also inclnde amendments to certifications that have been 
submitted by the govemment and approved by the Court in the Prior 702 Dockets, The 
amendments, which have been authorized by the Attorney General and the DNI 3 provide that 
information collected under the certifications in the Prior 702 Dockets will, effective upon the 
Court' s approval of Certifications HHH^^HHHHI^ l)e Ivandlcd subject to the same 
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revised NSA and CIA minimization procédures that have been submitted for use in connection 
Avith Certifications j 



B, The Mav 2 "Clarification" Letter 

On May 2 ? 2011, the government filed with the Court a letter pursuant to FISC Rule 13(a) 
titled "Clarification of National Security Agency's Upstream Collection Pursuant to Section 702 
of FISA" ("May 2 Letter"). The May 2 Letter disclosed to the Court for the first tlmo that NSA's 
"upstream collection" 3 of Internet communications inoludes the acquisition of entire 
"transaction^] 91 

HHHT According to the May 2 Letter» such transactions may contain data that is wholly 
unrelated to the tasked selector, including the full content of discrète communications that are not 
to, from, or about the facility tasked for collection, See M* at 2-3 . The letter noted that NSA 

"the person from whom it seeks to obtain foreign intelligence information is located overseas," 
but suggested that the government might lack confidence in the effectiveness of such measures as 
applied to Internet transactions, See idL at 3 (citation omitted). 



3 The teim "upstream c ollection" refers to NSA's interception of Internet 
communi cations as they transit] 

.rather than to acquisitions directly from Internet service ] 





A The concept of "Internet transactions" is discussed more fully below, gee inffau pages 
27-41 and note 23, 
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C. The Governmenf s First Motion for Extensions of Time 

On May 5, 201 1 , the government filed a motion seeldng to extend until My 22, 201 1 , the 
30-day periods in wliich the Court must otherwise complète ifs review of Certifications HHH 




Motion for an Order Extending Time Limit Pursuant to 50U.S.C, § ÏSSla(j)(2)atl f*May 
Motion"). The period for FISC review of Certification IHHHHHHHHIHI 




review of the other pending certifications and amendments was set to expire on May 22, 201 1 . 
£& at 6. 5 

The government noted in the May Motion that its efforts to address the issues raised in 
the May 2 Letter were still ongoing and that it intended to "supplément the record , . . in a 
manner that will aid the Court in its review" of the certifications and amendments and in maktog 
the déterminations required under Section 702. Id, at 7. Àccording to the May Motion, however, 
the government would <c not be in a position to supplément the record until afler the statutory time 
limits for such review have expired " 14 The government further asserted that granting the 
requested extension of time would be consistent with national security 5 because, by opération of 



5 50 U.S.C. § 1 881a(i)(l)(B) l'equires the Court to complète its review of the certification 
and accompanying targeting and minimization procédures and issue an order under subsection 
1 881a(i)(3) not later than 30 days after the date on which the certification and procédures are 
submitted. Pursuant to subsection 1881a(i)(l)(C), the same time limit applies to review of an 
amended certification or amended procédures, However, 50U.S.C. § 1881a(j)(2) permitsthe 
Court, by order for reasons stated, to extend "as necessary for good cause in a manner consistent 
with national security," the time limit for the Court to complète its review and issue an order 
under Section 1881 a(i)(3). 





I and the amendments to the certifications in the Prior 702 Dockets. See 





was thon set to expire on May 20, 201 1, and the peiiod for 
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statute, the governmenf s acquisition of foreign intelligence information under Certifications 
HHHHHI^^HHHH c °uld continue pending completion of the Court's review, See id, 
at9-10. 

On May 9, 20 1 1 > the Court entered ovâoxs granting the government' s May Motion. Based 
upon the représentations in the motion, the Court found that there was good cause to extend the 
time limit for its review of the certifications to July 22> 201 1, and that the extensions were 
consistent with national security. May 9, 201 1 Orders at 4. 

D. The Mav 9 Briefîng Order 

Because it appeared to the Court that the acquisitions described in the May 2 Letter 
exceeded the scope of collection previously disclosed by the government and approved by the 
Court, and might> in part } fall outeide the scope of Section 702, the Court issueda Briefmg Order 
on May 9, 201 1 ("Briefmg Order"), in which it directed the government to answer a number of 
questions in writing. Briefmg Order at 3-5, On June 1, 201 î, the United States fîled the 
"Government's Response to the Court's Briefmg Order of May 9> 2011" ("June 1 Submission"). 
After reviewing the June 1 Submission* the Court, through its staff» directed the government to 
answer a nuinber of folio w-up questions, On June 28, 201 1 4 the government submitted its 
written responses to tire Court's follow-up questions in the "Govemment's Response to the 
Court's Follow-Up Questions of June 17, 2011" ("June 28 Submission"), 

E, The Government's Second Motion for Extensions of Time 

The Court met with senior officiais of the Department of Justice on July 8, 201 1 5 to 
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discuss the information provided by the government in the June 1 and June 28 Submissions. 
During the meeting, the Court informed the government that it still had serions concerns 
regarding NSA 5 s acquisition of Internet transactions and, in particular, whether the Court could 
make the findings neeessary to approve the acquisition of such transactions pursuant to Section 
702* The Court also noted its willingness to entertain any additional fîlings that the government 
might choose to make in an effort to address those concerns. 

On July 14, 201 1, the government flled a motion seeking additional sixfy-day extensions 
of the periods in which the Court must complète its review of DNI/AG 702(g) Certifications 
flHHHHflHHMH» arid tlle amendments to the certifications in the Prior 702 Dockets. 
Motion for Orders Extending Time Limits Pursuant to 50 U.S.C, § 1881a(j)(2) ("July Motion"). 6 

In its July Motion, the government indicated that it was in the process of compiling 
additional information regarding the nature and scope of NSA's upstream collection» and that it 
was "examining whether enhancements to NS A's Systems or processes could be made to further 
ensure that information acquired through NSÀ's upstream collection is handled in accordance 
with the requirements of the Act " KL at 8", Because additional time would be needed to 
supplément the record, however, the government represented that a 60-day extension would be 
necessary, IdL at 8, 1 1 . The government argued that granting the request for an additional 
extension of time would be consistent with national security, because* by opération of statuts the 

6 As discussed above, by opération of the Court' s order of May 9, 201 1, pursuant to 50 
U.S.C. § 1881a0)(2)> the Court was required to complète its re view of, and issue orders under 50 
U.S.C,§ 1881a(i)(3) conceming, DNI7AG 702(g) Ceilification^H^^Hm^^H 

and the amendmçnts to the certifications in the Prior 702 Dockets, by July 22, 2011, IçL at 6. 
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governmenf s acquisition of foreign intelligence information under Certifications 
mmm(coiikl continue pending completion of the Court 5 s review* Id. at 9-10. 

On My 1 4, 201 1, the Court entered orders granting the government 5 s motion, Based 
upon the représentations in the motion, the Court found that tliere was good cause to extend the 
time limit for its. review of the certifications to September 20, 201 1, and that the extensions were 
consistent with national security* July 14, 201 1 Orders at 4, 

F. The August 1 6 and August 30 Submissions 

On August 16, 201 1, the government filed a supplément to tlie June 1 and June 28 
Submissions ("August 16 Submission"), In the August 16 Submission, the government 
described the results of "a manuai review by [NSA] of a statistically représentative sample of the 
nature and scope of the Internet communications acquired through NS A* s v . . Section 702 
upstream collection during asix-monthperiod " Notice of Filing of Aug. 16 Submission at2. 
Following a meeting between the Court staff and représentatives of the Department of Justice on 
August 22, 2011, the government submitted a forther filing on August 30,2011 ("August 3 
Submission"). 

G. Tlie Hearing and the Goverhment's Final Written Submission 

Following review of the August 30 Submission, the Court held ahearing on September 7, 
201 1 > to ask additional questions of NSA and the Department of Justice regarding the 
governmenfs statistical analysis and tlie implications of that analysis, The government made its 
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final written submissions on September 9, 201 1, and September 13, 201 1 ("September 9 
Submission" and "September 13 Submission," respectively), 
H The Final E xtension of Time 

On September 14, 201 1 , the Court entered orders further extending the deadline for its 
cornpletion of the review of the certifications and amendments filed as part of the Àpril 
Submissions, The Court explained that "[g]iven the complexity of tho issues presented in thèse 
matters coupled with the Courtes need to fully analyze the supplemental information provided by 
the govemtnent in récent filings, the last of which was submitted to the Court on September 13, 
201 1, the Court will not be able to complète its review of, and issue orders , . . conceming [the 
certifications and amendments] by September 20, 201 1 " ^^HH^HHHHHHHi 




intended to extend the deadline by only one week, the government had advised the Court that 
"for technical reasons, such a brief extension would compromise the government's ability to 
ensure a searnless transition from one Certification to the next" ^■■^■■H 






The Court ftirther explained. that althougli it had originally 






Accordingly, the Court extended the deadline to October 10, 



201 L 
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II. REVIEW OF CERTIFICATIONS ^^■■■^■■■1 

The Court must review a certification submitted pursuant to Section 702 of FIS A "to 

détermine whether [it] contains ail the required éléments." 50 tLS.C. § 1881a(i)(2)(A). The 

Courts examination of Certifications HHliiHiHIili^HHi confirma that: 

(1) the certifications have been made under oath by the AttomeyGeneral and the DNI, i 
required by 50 U.S.C, § 1881a(g)(l)(A), seg Certification | 



(2) the certifications contain each of the attestations requlred by 50 U,S.C» 
§ 1881a(g)(2)(A) a see Certification | 



(3) as required by 50 U.S.C. § 1881a(g)(2)(B) 5 each of the certifications is accompanied 
by the applicable targeting procédures 7 and minimization procédures; 8 

(4) each of the certifications is supported by the affîdavits of appropriate national security 
officiais, as described in 50 U.S.C. § 1881a(g)(2)(C); 9 and 

(5) each of the certifications includes an effective date for the authorization in compliance 



7 See April 2011 Submissions, NSA Targeting Procédures and FBI Targeting Procédures 
(attachedto Certifications WÊÊÊÊÊÊÊÊH^ÊÊKKÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊKÊtÊÊ)^ 

8 £ee April 201 1 Submissions, NSA Minimization Procédures, FBI Minimizatton 
Procédures^ and CIA Minimization Procédures (attached to Certifications I 



9 See April 201 1 Submissions., Affidavits of Joh n C, ftiglis, Acting Director, NSA 
(attached to Certifications PHHMHHHHHH); Affîdavit of Cten. Keith B, Alexander, 



U,S, Army, Director, NSA (attached to Certification 
Mueller» III, Directe, FBI (attached to Certifications 




; Affîdavits of Robert S. 
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with5QU.S,C, § 1881a(g)(2)(D) 3 see Certification 



10 





The Court therefore fmds that Ccatiilcatioi:fBI|[^HHHI^^^^HIHIHHHHH 



■contab ail the required éléments. 50 U.S.C § 188 la(i)(2)(A), 

IIL REVIEW OF THE AMENDMENTS TO THE CERTIFICATIONS IN THE PRIOR 
DOCKBTS. 

Under the judicial revîew procédures that apply to amendments by yirtue of Section 
1881a(i)(l)(C), the Court must review each of the arnended certifications "to détermine whether 
the certification contains ail the required éléments." 50 U.S.C. § 1881a(i)(2)(A), The Court has 
previously detemiined that the certifications în eaeh of the Prior 702 Dockets, as originally 
submitted to the Court and previously amended, contained ail the required cléments. 11 Like the 
prior certifications and amendtnents, the amendments now before the Court were executed under 
oath by the Attorney General and the DNI, as required hy 50 U.S.C, § l881a(g)(l)(A), and 
submitted to the Courtwithin the timeallowed under 50 U.S.C § 1881a(i)(l)(C). gee 

10 The statement described in 50 U.S.C. § 1881a(g)(2)(E) is not required in thîs case 
because there has been no "exigent circumstances" détermination under Section 1881a(c)(2), 
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Cetlriication^^^HHH^HHHHH^HHIHHHHIi^^HHil 12 Pursuant 
to Section 1881a(g)(2)(A)(ii) ? the latest amendments include the attestations of the Attorney 
General atid the DNI that tlie accompanying NSÀ and CIA minimization procédures meet the 
statutory définition of minimization procédures, are consistent with the requirements of the 
Fourth Àmendment, and will be submitted to the Court for approvaL CeriificatlorHH^HI 

The latest amendments also 
include effective dates that complywith 50 U.S.C. § 1881a(g)(2)(D) and § 1881a(i)(l), 

CertilicatiotxBBHHIHHHHHHHH^^H^^^^^^Hi Ail other aspects 
of the certifications in the Prior 702 Dockets - including the further attestations made therein in 
accordance with § 1881a(g)(2)(A) > the NSA targeting procédures and FBI minimization 
procédures submitted therewith in accordance with § 1881a(g)(2)(B), lâ and the affîdavits 
executed in support thereof in accordance with § 1 881a(g)(2)(C) ~ are unaltered by the latest 
amendments. 

In light of the foregoing, the Court fmds that the certifications in the Prior 702 Dockets, 
as amended, each contain ail the required éléments, 50 U.S,Q § 1881a(i)(2)(À), 



12 The amendments to the certifications in the Prior 702 Dockets were approved by the 
Attorney General on April 11,2011, and by the DNI on April 13, 20 IL gee Certification 



13 Of course, targeting under the certifications filed in the Prior 702 Dockets will no 
longer be permitted following the Courtes issuance of an order on Certifications) 
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IV, REVIEW OF THE TARGETING AND MINIMIZATION PROCEDURES 

The Court is required to review the targeting and minimlzation procédures to détermine 
whetherthey are consistent with the requirernents of 50 U.S.C, § 1881a(d)(l) and(e)(l). Ses 
50 U.S.C. § 1881a(i)(2)(B) and (C); see also 50 U.S.C. § 1881a(i)(l)(C) (providing that amended 
procédures must be reviewed under the same standard). Section 1881a(d)(l) provides that the 
targeting procédures must be "reasonably designed" to "ensure that any acquisition authorized 
under [the certification] is liniited to targeting persons reasonably believed to be located outside 
the United States" and to "prevent the intentional acquisition of any communication as to which 
the sender and ail intended récipients are known at the time of the acquisition to be located in the 
United States " Section 1881a(e)(l) requires that the mmimization procédures "meet the 
définition of minimization procédures under [50 U,S,C. §§] 1801(h) or 1821(4) * . . " Most 
notably, that définition requires "spécifie procédures, which shall be adopted by the Attorney 
General, that are reasonably designed in light of the purpose and teclinique of the particular 
[surveillance or physical search], to minimize the acquisition and rétention; and prohibit the 
dissémination, of nonpublicly available information conceming unconsenting United States 
persons consistent with the need of the United States to obtain, produce, and disseminate foreign 
intelligence information/ 1 50 U.S.C. §§ 1801(h) & 1821(4). Finally, the Court must détermine 
whether the targeting and minimization procédures are consistent with the requirernents of the 
Fourth Amendaient 50 U.S.C. § 1881a(i)(3)(A). 
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A. The Effect of the Government' s Disclosures Resarding NSA*s Acquisition of 
Internet Transactions on the Courts Review of the Targeting and Minimization 
Procédures 

The Courtes review of the targeting and minimization procédures submitted with the 
April 2011 Submissions is complicated by the govemmenf s récent révélation that NSA* s 
acquisition of Internet communications through its upstream collection under Section 702 is 
accomplishect by acquiring Internet "transactions " which may contain a single, discrète 
communication, or multiple discrète communications, includîng communications that are neither 
to ? from, nor about targeted facilitiez, June 1 Submission at 1-2. That révélation fundamentally 
alters the Court' s understanding of the scope of the collection conducted pursuant to Section 702 
and requires careful reexaniination of many of the assessnients and présomptions underlying its 
prior approvak 

In the first Section 702 docket, ^■HI^HHH the government disclosed that 
its Section 702 collection would include both téléphone and Internet communications. 
According to the government, the acquisition of téléphonie communications would be limited to 
"to/from" communications - Le., communications to or from a tasked facility. The government 
explained, however, that the Internet communications acquired would include both to/from 
conmiunications and "about" communications - communications containing a référence to 
the name of the taslced account Sec WÊBÊÊÊÊÊKKÊÊÊÊÊÊKÊÊÊ^^^ÊKÊÊÊÊK^Ê' 
Based upon the governmenfs descriptions of the proposed collection, the Court understood that 
the acquisition of Internet communications under Section 702 would be limited to discrète 
"to/from" communications between or among individual account users and to "about" 
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communications falling withfcflj spécifie catégories that had been first described to "the Court 
inpiior proceedings, 




The Court' s analysis and ultimate 
approval of the targetiug and minimization procédures in Docket No, jg^gg^^ an( j ^ ^ 

othei^m Prior 702 Dockets, depended upon the govemmenfs représentations regarding the 
scope of the collection, In conducting its review and granting those approvals, the Court did not 
take into accountNSÀ's acquisition of Internet transactions, which now materially and 
fundamentally alters the statutory and constîtutional analysis. 14 



14 The Court is troubled that the govemment's révélations regarding NSA 5 s acquisition 
of Internet transactions mark the third instance in less than three years in which the government 
has disclosed a substantial misrepresentation regarding the scope of a major collection program. 

fri March, 2009, the Court concluded that its authoriza tion of NSA* s bulk acquisition of 
téléphone call détail records from HIHHHINHNH ^ n so-called "big business 
records" matter "ha[d] been premised on a flawed depiction of how the NSA uses [the acquired] 
metadata," and that "[t]his misperception by the FISC existed &om the inception of its authorized 
collection in May 2006, buttressed by repeated inaccurate statements made in the govemmenf s 
submissions, and despite a government-devise d and Court-mandated oversight régime." Docket 
|^^^^^^^^||BHIiHliHHHHi Contrary to the governmenfs repeated 
assurances, NSA had been routittely ruiming queries of the metadata using queiying terms that 
did not meet the required standard for queiying. The Court concluded that this requirement had 
been "sa frequently and systemically violated that it can fairly be said that this critical élément of 
the overail * . » régime has never functioned effectively," Id, 
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The government's submissions rnake clear not only that NSA has been acquiriug Internet 

transactions since before the Court's approval of the first Section 702 certification in 2008» 15 but 
also that NSÀ seeks to continue the collection of Internet transactions, Because NSÀ's 
acquisition of Internet transactions présents difîîcult questions, the Court will conduct its review 
in two stages, Consistent with the approach it has followed in past reviews of Section 702 
certifications and atnendments s the Court will first consider the targeting and minimization 
procédures as applied to the acquisition of communications other than Internet transactions - Le,, 
to the discrète communications between or among the users of téléphone and Internet 
communications facilities that are to or ftom a fecility tasked for collection. 16 The Court will 




15 The governmenfs révélations regarding the scope of NSÀ's upstream collection 
implicate 50 U,S,C. § 1 809(a), which makes it a crime (1) to "engage[] in electronic surveillance 
under color of law except as authorized" by statut© or (2) to "disclose[] or use[] infomaation 
obtained under color of law by electronic surveillance, knowing ot having reason to know that 
the information was obtained thtough electronic surveillance n ot authorized" by statute, See 
^■■■■■HHHlHflflHHHMiHiHH (conclu cling that Section 

1 809(a)(2) precluded the Court fiom approving the governmentf s proposed use of, among other 
things> certain data acquired by NSÀ without statutory authority through its "upstream 
collection"). The Court will address Section 1809(a) and related issues in a separate order, 

16 As noted, the Court previously authorized the acquisition of ^| catégories of "about" 
communications. The Court no w understands that ail "about" communications are acquked by 
means of NSA's acquisition of Internet transactions through its upstream collection, gee June 1 
Submission at 1*2, see also Sept. 7, 201 1 Hearing Tr, at 76. Accordingly s the Court considers the 

(continned,..) 
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then assess the effeot of the récent disclosures regarding NSA" s collection of Internet transactions 

on its ability to make the fmdings necessaiy to approve the certifications and the NSA targeting 
and mmimization procédures, 17 

B, The Unmûdified Procédures 

The government represents that the NSA targeting procédures and the FBI minimization 
procédures fîled with the April 201 1 Submissions are identical to the corresponding procédures 
that were submitted to the Court in Docket Nos, HHHBHI^^^^HHHHilHH 18 

The Court has reviewed each of thèse sets of procédures and confîrmed that is the case. In fact, 
the NSA targeting procédures and FBI minimization procédures now before the Court are copies 



%..continued) 

catégories of "about" communications to be a subset of the Entemet transactions that NSA 
acquires. The Courtes discussion of the manner in which the government proposes to apply its 
targeting and minimization procédures to Internet transactions generally also applies to the^} 
catégories of "about" communications, .See jtnfrff, pages 41-79, 

17 The FBI and the CIA do not receive unminimized communications that have been 
acquired throughNSÀ's upstream collection of Internet communications, Sept, 7, 201 1 Hearing 
Tr. at 61-62. Accordingly, the discussion of Internet transactions that appears helow does not 
affect the Courtes conclusions that the FBI targeting procédures, the CIA minimization 
procédures, and the FBI minimization procédures meet the statutory and constitutional 
requirements. 

18 See Government' s Ex Parte Submission of Reauthorization Certification and Related 
Procédures, Ex Parte Submission of Amended Certifications, and Request for an Order 
Approving Such Certification and A mended Certifications for DNI/AG 702(g) Certifications 
W^^^^Êf^E^^KÊÊtÊÊÊÊÊ'* Govercimenf s Hx Parte Submission of Reauthorization 
Certification and Related Procédures, Ex Patte Submission of Amended Certifications, and 
Request for an Qrder Approving Such Certification and Amende d Certifications for DNI/AG 
702(g) Certifications flHfl^^^H^^^HHHHlil^H; Government' s Ex Parte 
Submission of Reauthorization Certification and Related Procédures, Ex Parte Submission of 
Amended Certifications, and Request for an Qr der Approving Such Certification and Ame nded 
Certifications for DNI/AG 702(g) Certifications | 
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of the procédures that were initially filed on July 29, 2009, in Docket No , I^HHHP T ^ e 

Court found in those prior dockets that the targeting and minimization procédures were 

consistent with the requkements of 50 U.S.C, § 188 la(d)~(e) and with the Fourth Amendtnent, 

See Docket No, I 




The Court is prepared to renew its past fîndings tliat the NSA targeting procédures 
(as applîed to forms of to/from communications that have previousiy been described to the 
Court) and the FBI minimization procédures are consistent with the requirements of 50 U.S.C. § 
1 88 la(d)-(e) and with the Fourth Amendment 20 
C* The Amended Procédures 

As noted above, the FBI targeting procédures and the NSA and CIA minimization 
procédures submitted with the April 201 1 Submissions differ in a number of respects ftom the 
coiTesponding procédures that were submitted by the govemment and approved by the Court in 
connection with Certifications jgj^^g^ggggggggg^^ p or ^ reasotls tliat follow, the 
Court iînds that, as applied to the previousiy authorized collection of discrète communications to 
or fl'om a tasked facilita the amended. FBI targeting procédures and the amended NSA and CIA 



Copies of those same procédures were also submitted in Docket Nos, j 



20 The Court notes that the FBI minimization procédures are not "set forth in a clear and 
self-contained mamier, witliout resort to cross-referencing," as required by FISC Rule 12, which 
became effective on November 1, 2010. The Court expects that future submissions by the 
government will comport with this requirement, 
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minimization procédures are consistent withthe requiremenfs of 50 U.S.C. § 1881a(d)-(e) and 

with the Fourth Amendment 

L The Amended FBI Targeting Procédures 
The government has made three changes to the FBI targeting procédures, ail of which 
involve Section 1.4. That provision requires the FBI, j 



The new language proposed by the government would allow the FBI to i 



The government has advised the Court that this change was prompted 



bythefact that 




Nevertheless, 
The change is intended to 



the current procédures recuire the FBI to 
eliminate the requirement of 

The second change, reflected in subparagraph (a) of Section 1.4, would allow the FBI, 
under certain circumstances, to 
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The above-described changes to tlie FBI targeting procédures pose no obstacle to a 
■ fînding by the Court that the FBI targeting procédures are "reasonably designed" to "ensure that 
any acquisition authorized , . . is limited to targeting persons reasonably believed to be located 
outside the United States" and to "prevent the intentional acquisition of any communication as to 
which the sender and ail intended récipients are known at the time of the acquisition to be located 
in the United States." 50 U>3.C. § 1881a(d)(l). ^BÊÊÊÊÊÊÊÊKIBÊMIÊÊÊÊKÊ 
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Furthermore, as the Court lias previously noted s before the FBI targeting procédures are 
applied, NSA will hâve folio wed its own targeting procédures in determining that the user of the 
facilîty to be tasked for collection is a non-United States person reasonably believed to be located 
outside the United States. Scg Docket No , flHH^HHHHHHH^^^flHH, The 




IcL The Court has previously found that| 
| proposed for use in connection wUh Certifications ^^^^^h^^^^^^h are 

reasonably designedto ensure that the users of tasked selectors are non-United States persons 
reasonably believed to be located outside the United States ancl also consistent with the Fourth 
Amendaient. See Docket No 1 

It therefore follows that the 
amended FBI targeting procédures, whioh provide additional assurance that the users of tasked 
accounts are non-United States persons located outside the United States, also pass muster. 
2. The Amended NSA Minimization Procédures 
The moat signiflcant change to the NSA minimization procédures regards the rules for 
querymg the data that NSA aequires pursuant to Section 702. The procédures previously 
approved by the Court effectively impose a wholesale bai* on queries using United States-Person 
identiflers. The government has broadened Section 3(b)(5) to allow NSA to queiy the vast 
majority of its Section 702 collection using United States-Person identiflers, subject to approval 



-Teï L S E C RET// C QIMmT //Q RC ON 5 N O TOI tN 



Page 22 



(b)(1), (b)(3) 



TQPSE C RET//CQMINT//QRCQN > NOFORN 

pursuant to internai NSA procédures and oversiglit by the Department of Justice, 21 Lifce ail other 

NSA queries of the Section 702 collection, queries using United States-person identifîers would 
be limited to those reasonably lilcely to yield foreign intelligence information. NSA 
Minimization Procédures § 3(b)(5)« The Department of Justice and the Office of the DN1 would 
be required to conduct oversight regarding NSA's use of United States-person identifiera in such 
queries, See id. 



This relaxation of the querying rules does not alter the Courts prior conclusion that NSA 
minimization procédures meet the statirtoiy définition of minimization procédures. HHHH 




queries of umninimized FISA-acquired information using identifîers - including United States- 
person identifîers ~ when such queries are designed to yield foreign intelligence information. 
^HHHHHl g^^tLtmg0BHHl a PP^ ca ^ ons :for electeonic surveillance or 
physical search since 2008, including applications targeting United States persons and persons in 
the United States, the Court lias found that the mee * *he définitions of minimization 

procédures at 50 U.S.C. §§ 1801(h) and 1821(4). It follows that the substantially-similar 



21 The government is still in the process of developing its internai procédures and wiil 
not permit NSA analyste to begin using United States-person identifîers as sélection tetms until 
those procédures are completed, June 28 Submission at 4 In addition, the government has 
clarifîed that United States-person identifîers will not be used to query the fruits of NSA*s 
upstream collection, Aug. 30 Submission at 1 1. NSA's upstream collection acquires 
approximately 9% of the total Internet communications acquired by NSA under Section 702, 
Aug. 16 Siibtnission at 2, 
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querying provision found at Section 3(b)(5) of the amertded NSA minimization procédures 

should not be problematic in a collection that is focused on non-United States persons located 
outside the United States and that, in the aggregate, is less Jîkely to resuit in the acquisition of 
nonpublic information regarding non-consenting United States persons. 

A second change to the NSA minimization procédures is the addition of language 
specifying that the fîve-year rétention period for communications that are not subject to earlier 
destruction nms jfrom the expiration date of the certification authorizing the collection, See NSA 
Minimization Procédures, §§ 3(b)(l), 3(c), 5(3)(b) 9 and 6(a)(l)(b). The NSA minimization 
procédures that were previously approved by the Court included a rétention period of five years, 
but those procédures do not specify when the five-year period begins to rua The change 
proposed here harmonizes the procédures with the corresponding provision of the|^ 
minimization procédures for Section 702 that lias already been approved by the Court. See^i 
Minimization Procédures at 3 flj j), 

The two remaining changes to the NSA minimization procédures are intended to clarify 
the scope of the existing procédures. The govemment has added language to Section 1 to make 
explicit that the procédures apply not only to NSA employées, but also to any other persons 
engaged in Section 702-related activities that are conduoted under the direction, authority or 
control of the Director of NSA, NSA Minimization Procédures at 1, Accordmg to the 
govemment, this new language is intended to clarify that Central Security Service personnel 
conducting signais intelligence opérations authorized by Section 702 are bound by the 
procédures, evon when they are deployed with a military unit and subject to the military chain of 
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command, The second clmifying amendaient is a change to the définition of "identification of i 

United States person" in Section 2< The new language éliminâtes a potential ambiguity that 
might have resulted in the inappropriate treatment of the narne, unique title, or address of a 
United States person as non»identifying information in certain circumstances. 14. at % Thèse 
améndments, which résolve any arguable ambiguity in favor of broader application of the 
protections foxmd in the procédures, raise no concerna. 

3, The Ainended CIA Minimization Procédures 
The CIA minimization procédures include a new querylng provision | 




The new language would allow the CIA to 
conduct queries of Section 702-acquired information using United States-person identifiers, AU 
CIA queries of the Section 702 collection would be subject to review by the Department of 
Justice and the Office of the DNI. flHHHHHHHHHim^^HHINH 

, the addition of the 

new CIA querying provision does not preclude the Court from conciuding that the amended CIA 
minimization procédures satisfy the statutory définition of minimization procédures and comply 
with the Fourth Amendment, 22 

The amended CIA minimization procédures include j 



22 The Court understands that NSA does not share its upstr eam collection in 
unminimized forai with the CIA* 
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D. The Effect of the Government' s Disclosures Re&arding NSA' a Acquisition of 
Internet Transactions 

Based on the governmenfs prior représentations, the Court has previously analyzed 

NSA's targeting and minimization procédures only in the context of NSA acquiring discrète 

communications* Now, however, in light of the govemment's révélations as to the manner in 

which NSA acquires Internet communications, it is clear that NSA acquires "Internet 
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transactions»" 23 including transactions that contain a single discrète communication ("Single 

Communication Transactions" or "SCTs"), and transactions that contain multiple discrète 
communications ("Mnlti-fCJommunication Transactions" or "MCTs"), £ee Aug. 16 Submission 
ail. 

The Court has repeatedly noted that the government' s targeting and minimization 
procédures must be considered in light of tfae communications actually acquired. gee Docket No, 
fll^HHHfllHHflfl^HHHHII ("Substantial i triplement ation problème can, 
notwithstanding the governmenfs intenta speak to whether the applicable targeting procédures 
are 'reasonably designed 5 to acquire only the communications of non-U.S. persons outside the 
United States"), see also Docket No. ^^^^^^HH^^H^^HHIHHHH^IH 
Untii now, the Court had a singular understanding of the nature of NSA's acquisitions under 
Section 702* Accordmgly, analysis of the implementation of the procédures focused on whether 
NSÀ's procédures were applied effectively in that context and whether the procédures adequately 
addressed over-collections that occiuted. But, for the fîrst tirne, the government has now advised 
the Court that the volume and nature of the information it has been collecting is fundamentally 
différent ftom what the Court had been led to believe, Therefore, the Court must 5 as a matter of 
first impression, consider whether, in view of NSA' s acquisition of Internet transactions, the 
targeting and minimization procédures satisfy the statutoiy standards and comport with the 



23 The government describes an Internet "transaction" as "a complément of e packets s 
traversing the Internet that together may be understood by a device on the Internet and, where 
applicable, rendered in an intelligible fonn to the user of that device June 1 Submission at 1. 
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Fourth Amendment 

For the reasons set forfh below, the Court fînds that NSA' s targeting procédures, as the 
government proposes to implement them in connection with MCTs 3 are consistent with the 
requirements of 50 U.S.C. §1881a(d)(l) + However, the Court is unable to findthatNSA's 
minimization procédure^ as the government proposes to apply them in connection with MÇTs, 
are "reasonably designed in light of the purpose and technique of the particular [surveillance or 
physical search], to minimize the acquisition and rétention, and prohibit the dissémination, of 
nonpnblicly available information concerning unconsenting United States persons consistent 
with the need of the United States to obtain, produce, and disseminate foreign intelligence 
information/ 5 50 U.S.C. §§ I801(h)(l) &1821(4)(A). Tho Court is also xmable to fïnd that 
NSA* s targeting and minimization procédures, as the govenment proposes to implement them in 
connection with MCTs, are consistent with tho Fourth Amendment. 

1* The Scope of NSA's Upstream Collection 

NSA acquires more than two hundred fîfty million Internet communications each year 
pursuant to Section 702, but the vast majority of thèse communications are obtained fiom 
Internet service providers and are not at issue here, 24 Sept, 9 Submission at 1; Aug, 16 
Submission at Appendix A. Indeed, NSA's upstream collection constituas only approximately 



24 In addition to its upstream c ollection, NSA acquires discrète Internet communications 
from Int ernet service providers such ^WIÊÊÊÊÊI^B^^Ê^^^^KKÊÊKÊI^KÊÊÊ 

BU Aug, 1 6 Submissio'n at 2; Aug, 30 Submission at 1 1 ; see also Sept. 7 S 20 1 1 Hearing Ti\ 
at 75-77, NSA refers to this non-upstream collection as its "PRISM collection " Aug, 30 
Submission at 11, The Court nnderstands that NSA does not acquire "Internet transactions" 
through its PRISM collection, £ee Aug, 16 Submission at 1 . 
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9% of the total Internet communications being acquired by NSA under Section 702. Sept, 9 

Submission at 1; Aug, 16 Submission at 2. 

Although. small in relative ternis, NSA' s upstream collection is significant for tbree 
reasons, First, NSA's upstream collection is "uniquely capable of acquiring certain types of 
targeted communications containing valuable foreign intelligence information " 25 Docket No, 



Second, the Court now understands that, in order to collect those targeted Internet 
communications, NSA's upstream collection devices acquite Internet transactions, and NSA 
acquires millions of such transactions each year, 26 Third, the government has acknowledged that s 
due to the technological challenges associated with acquiring Internet transactions, NSA is 
imable to exclude certain Internet transactions ûom its upstream collection, gee June 1 
Submission at3-12< 

In its June 1 Submission, the govemment explained that NSA's upstream collection 
devices have technological limitations that significantly affect the scope of collection. Bl 





26 NSA acquired more than 13 .25 million Internet transactions through its upstream 
collection between January 1, 201 1 , and June 30, 201 L See Aug, 1 6 Submission at 2; see also 
Sept 9 Submission at 1-2, 
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|, gee id at 7, Moreover, at the time of 



acquisition, NSA's upstream Internet collection devices are generally incapable of distinguishing 
between transactions containing only a single discrète communication to 5 :from 5 or about a tasked 
selector and transactions containing multiple discrète communications, not ail of which may be 
to, from, or about a tasked selector? 7 IçL at 2. 

As a practical matter, this means that NSÀ's upstream collection devices acquire any 
Internet transaction transiting the device if the transaction contains a targeted selector anywhere 
within it»and: 




See id, at 6. 

The practical implications of NSA's acquisition of Internet transactions through its 
upstream collection for the Court' s statutory and Fourth Amendment analyses are difficult to 
assess, The sheer volume of transactions acquired by NSA through its upstream collection is 
suoh that any meaningful review of the entîre body of the transactions is not feasible, As a resuit 
the Court Cannot know for certain the exact number of wholly domestic communications 
acquired through this collection, nor can it know the number of non-target communications 
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acquired or the extent to which those communications are to or from United States persons or 

petsons in the United States. ftistead, NSA and the Court can only look at samples of the data 
and then draw whatever reasonable conclusions they can from those samples, Even if the Court 
accepta the validity of conclusions derfved from statistioal analyses, there are signifîcant hurdles 
in assessing NSA' s upstream collection. Internet service providers are constantly changing their 
protocols and the services they provide, and often give users the ability to custonrize how they 
use a partioular service, 28 Id. at 24-25. As a resuit, it is impossible to defîne with any specificity 
the universe of transactions that will be acquired by NSA's upstream collection at any point in 
the future. 

Recognizing that further révélations conceming what NSA has actually acquired through 
Its 702 collection, together with the constant évolution of the Internet, may alter the Court* s 
analyste at some point in the future, the Court must, nevertheless, consider whether NSA's 
targetbg and mintmization procédures are consistent with FISA and the Fourth Amendment 
based on the record now before it. In view of the révélations about how NSA is actually 
conducting its upstream collection, two fondamental underpinnings of the Court' s prior 
assessments no longer hold tme> 
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First, the Court previously understood that NSA's technical measures 29 would prevent thc 

acquisition of any communication as to which the sender and ail intended récipients were located 



in the United States ("wholly domestic communication") except for "theoretically possible" cases 




acquiring, and, if the certifications and procédures now before the Court are approved, will 
continue to acquire, tens of thousands of wholly domestic communications. NSA's manual 
revi'ew of a statistically représentative sample drawn from ifs upstream collection 30 reveals that 
NSÀ acquires approximately 2^000-10,000 MCTs each year that contain at least one wholly 
domestic communication. 31 See Aug, 16 Submission at 9. In addition to thèse MCTs, NSA 




30 In an effort to address the Courtes concerna, NSA conducted a manual review of a 
random sample consisting of 5O 5 440 Internet transactions taken from the more than 13.25 million 
Internet transactions acquit ed through NSA's upstream collection during a six month period. See 
generallv Aug, 16 Submission (descrîbing NSA' s manual review and the conclusions NSA drew 
therefrom). The statistical conclusions reflected in this Mémorandum Opinion are drawn from 
NSA's analysis of that random sample, 

31 Of the approximately 13.25 million Internet transactions acquired by NSA through its 
upstream collection during the six-month period, between 996 and 4,965 are MCTs that contain a 
wholly domestic communication not to, ftom, or about a tasked selector. Aug. 16 Submission at 
9. 
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likeiy acquîtes tens of thousands more wholly domestic communications every year, 32 given that 

NSA's upstream collection devices will acquire a wholly domestic "about" SCT if it is routed 
intemationally. 53 Moreover, the actual number of wholly domestic communications acquired 



32 NSA* s manual review focused on examining the MCTs acquired through NSA's 
upstream collection in oïder to assess whether any contained wholly domestic communications. 
Sept* 7, 201 1 Hearing Tr. at 13-14, As a resuit» onceNSA defermined that a transaction 
contained a single, discrète communication, no further analysis of that transaction was done, See 
Aug> 16 Submission at 3. After the Court expressed concernthatthis category of transactions 
might also contain wholly domestic eonnnunications, NSA conducted a further review. S^e 
Sept 9 Submission at 4. NSA ultimately did not provide the Court with an esthnatc of the 
number of wholly domestic "about" SCTs that may be acquired through its upstream collection» 
Instead, NSA has concluded that "the probability of encountering wholly domestic 
communications in transactions that feature only a single, discrète communication should be 
smaller - and certainly no greater - than potentially encountering wholly domestic 
communications within MCTs/ 5 Sept, 13 Submission at 2. 

The Court undcrstands this to mean that the percentage of wholly domestic 
communications within the universe of SCTs acquired through NSA J s upstream collection 
should not exceed the percentage of MCTs containing a wholly domestic communication that 
NSA found when it examined ail of the MCTs within its statistical sample, Since NSA found 10 
MCTs with wholly domestic communications within the 5,081 MCTs reviewed, the relevant 
percentage is .197% (10/5,081), Àug. 16 Submission at 5. 

NSA's manual review found that approximately 90% of the 50,440 transactions in the 
sample were SCTs. IçL at 3. Ninety percent of the approximately 13,25 million total Internet 
transactions acquired by NSA through its upstream collection during the six-month period, works 
outto be approximately 11,925,000 transactions. Those 11,925,000 transactions would 
constitute the universe of SCTs acquired during the six-month period, and ,197% of that universe 
would be approximately 23,000 wholly domestic SCTs. Thus, NSA may be acquiring as many 
as 46,000 wholly domestic "about" SCTs each year, in addition to the 2,000-10,000 MCTs 
referenced above. 

33 Internet communications are "nearly always transmitted from a sender to a récipient 
through multiple legs before reaching their final destination/' June 1 Submission a t 6. For 
example» an e-mail message sent flom the u ser of^BHHHI^ ^ e user ,^JHHl 

| will at the ve ry least travel from the Jj^ Buser's 
and then to the computer of th^^^BI 
user. Ich Because the communication^ route is made up of multiple legs, the transaction used to 
transmit the communication across any particular ieg of the route need only identify the DP 

(continued,..) 
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may be still higher in view of NSÀ's inability conclusively to détermine whether a significant 

portion of the MCTs within its sample contained wholly domestic communications, 34 

Second^ the Court previously understood thatNSA's upstream collection would only 
acquire the conutnunication of a United States person or a person in the United States if; 1) that 




™ During its manual review> NSÀ was unable to détermine whether 224 of the 5>08 1 
MCTs reviewed contained any wholly domestic communications, because the transactions 
lacked sufficient information for NSÀ to détermine the location or identity of the "active user" 
fiue. . the individual using the electronic communications account/address/identifier to interact 
witli Ms/her Internet service provider). Àug, 16 Submission at 7> NSA then conducted an 
intensive review of ail available information for each of thèse MCTs, including examining the 
contents of each discrète communication contained within it 5 but was still unable to détermine 
conclusively whether any of thèse MCTs contained wholly domestic communications. Sept. 9 
Submission at 3. NSA asserts that "it is reasonable to présume that [the] 224 MCTs do not 
contain wholly domestic communications/' but concèdes that, due to the limitations of the 
technical means used to prevent the acquisition of wholly domestic communications, NSÀ may 
acquire wholly domestic communications, geg Aug, 30 Submission at 7-8. The Court is 
prepared to accept that the number of wholly domestic communications acquired in this category 
of MCTs is relatively small, for the reasons stated in the govemmenfs August 30 Submission. 
However, when consideringNSA's upstream collection as a whole, and the limitations of NSA 5 s 
technical means, the Court is not prepared to présume that the number of wholly domestic 
communications contained within this category of communications will be zéro, Àccordingly, 
the Court concludes that this category of communications acquired through NSA* s upstream 
collection may drive the total number of wholly domestic communications acquired slightly 
higher. 
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person was in direct contact with a targeted seleotor; 2) the communication referenced the 

targeted selector, and the communication fell into one ol'K spécifie catégories of "abolit" 
communications; or 3) despite the opération of the targeting procédures, United States persons or 
persons inside the United States were mistakenly targeted» See Doctet No. HHHHBi^l 
fl^H^IHHHflHBH^ But the Court now understands thaï:, in addition to thèse 
communications, NSA's upstream collection also acquires: a) the communications of United 
States persons and persons in the United States that are not to, from, or ahout a tasked seleotor 
and that are acquired solely because the communication is contained within an MCT that 
somewhere références a tasked seleotor H 

HHHH m & b) an y Internet transaction that références a targeted seleotor, regardless of 

whether the transaction falls within one of theJJ previously identified catégories of "about 
communications," §ùè June 1 Submission at 24-27. 



On the current record, it is difficult to assess how many MCTs acquired by NSA actually 
contain a communication of or concerning a United States person, 35 or a communication to or 
from aperson in the United States. This is because NSA* s manual review of its upstream 
collection focused primarily on wholly domestic communications - Le. , if one party to the 



35 NSA' s minimization procédures defme "[c]ommiinications of a United States person" 
to include "ail communications to which a United States person is a party.*' NSA Minimization 
Procédures § 2(c). ^Communications concerning a United States person" include "ail 
communications in which a United States person is discussed or mentioned, except where such 
communications reveal onlypublicly-available information about the person. IcL § 2(b). 
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communication was detemiined to be outside the United States, the communication was not 

further analyzed. Aug< 16 Submission at 1 «2. NeverÛieless, NSÀ's manual revlew did oonsidei* 
the location and identity of tho active user foi* each MCT acquîred, and this information - when 
considered together with certain presumptions - shows that NSA is likely acquirtag tens of 
thousands of discrète communications of non-target United States persons and persons in the 
United States, by virtue of the fact that their communications are included in MCTs selected for 
acquisition by NSA* s upstream collection devices. 3 * 

To illustrate, based upon NSA's analysis of the location and identity of the active user for 
the MCTs ît reviewed, MCTs can be divided into four catégories; 

1 . MCTs as to which the active user is the user of the tasked facility (Le., the target of the 
acquisition) and is reasonably believed to be located outside the United States; 37 

2. MCTs as to which the active user is a non-target who is believed to be located inside 
the United States; 

3 . MCTs as to which the active user is a non-target who is believed to be located outside 
the United States; and 



36 Although there is some oveiiap between this category of communications and the tens 
of thousands of wholly domestic communications discussed above, the overlap is limited to 
MCTs containing wholly domestic communications. To the extent that the wholly domestic 
communications acquired are SCTs, they are excluded ôom the MCTs referenced hère. 
Similarly, to the extent communications of non-target United States persons and persons in the 
United States that are contained within the tens of thousands of MCTs referenced here are not 
wholly domestic, they would not be included in the wholly domestic communications referenced 
above* 

37 Although it is possible for an active user target to be located in the United States, 
NSA's targeting procédures require NSA to terminale collection if it détermines that a target has 
entered the United States, NSA Targeting Procédures at 7-8. Àccordingly, the Court excludes 
this potential category ftom its analysis. 
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4. MCTs as to which the active user' s identity or location cannot be determined, 

Aug, 16 Submission at 4-8. 

With regard to the first category, if the target is the active user, then it is reasonable to 
présume that ail of the discrète communications within an MCT will be to or fîom the target, 
Although United States persons and persons in the United States may be party to any of those 
communications, NSA's acquisition of such communications is of less concern than the 
communications described in the following catégories because the communicants were in direct 
communication with a tasked facility, and the acquisition presumptively serves the foreign 
intelligence puipose of the collection. NSA acquires roughly 300400 thousand such MCTs per 
year + 38 

For the second category, since the active user is a non-target who is located inside the 
United States 5 there is no reason to believe that ail of the discrète communications contained 
within the MCTs will be to, from, or about the targeted selector (although there would need to be 
at least one such communication in order for NSA's upstream devices to acqnire tlie transaction). 
Further 3 because the active user is in the United States, the Court présumes that the m^jority of 
that person's communications will be with other persons in the United States, many of whom 
will be United States persons, NSA acquires approximately 7,000-8,000 such MCTs per year, 
each of which Hkely contains one or more non-target discrète communications to or ftom other 



38 NSA acquired between 168,853 and 206,922 MCTs as to which the active user was the 
target over the six-month period oovered by the sample, Àug. 16 Submission at 9, 
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persons in the United States, 39 

The third category is similar to the second in that the active user is a non-target 
Theiefore, there is no reason to believe that ail of the communications within the MCTs will be 
to, ûom 5 or about the targeted selector (although there would need to be at least one such 
communication in order for NSA' s upstream devices to acquire the transaction). However, 
because the active user is believed to be located outside the United States, the Court présumes 
that most of that persons's communications will be with other persons who are outside the 
United States, most of whom will be non-United States persons. That said, the Court notes that 
some of thèse MCTs are likely to contain non«target communications of or concerning United 
States persons, or that are to or from a person in the United States.' 10 The Court has no way of 
knowing precisely how many such communications are acquired, Nevertheless, it appears that 
NSA acquires at least 1 .3 million such MCTs each year/ 1 so even if only 1 % of thèse MCTs 



39 In its manual review, NSA identified ten MCTs as to which the active user was in the 
United States and that contamcd at least one wholly domestic communication. See Àug. 1 6 
Submission at 5-7* NSA also identified seven additional MCTs as to which the active user was 
in the United States* EL at 5, Although NSA determined that at least one party to each of the 
communications within the seven MCTs was reasonably believed to be located outside the 
United States, NSA did not indicate whether any of the communicants were United States 
persons or persons in the United States. I& The Court sees no reason to treat thèse two 
catégories of MCTs differently because the active users for both were in the United States, 
Seventeen MCTs constitutes 3% of the MCTs reviewed (5,081), and .3% of the 1,29-1.39 
million MCTs NSA acquires every six months (gee |çL at 8) is 3,870- 4,170, or 7,740-8,340 every 
year, 

40 The government has acknowledged as much in its submissions, See June 28 
Submission at 5, 

41 Based on its manual review, NSA assessed that 2668 of the 5,081 MCTs reviewed 

(continued,..) 
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contam a single non-target communication of or concerning a United States person, or that is to 

or from a person in the United States, NSA would be acquiring in excess of 10,000 additional 
discrète communications each year that are of or conceming United States persons, or that are to 
or from a person in the United States, 

The fourth category is the tnost problematic, because without the identity of the active 
■user - i^, whether the user is the target or a non-target - or the active user' s location, it is 
difficult to détermine what presumptions to make about thèse MCTs. NSÀ acquires 
approximately 97,000-140,000 such MCTs each year, 42 In the context of wholly domestic 
commmucations, the government urges the Court to apply a séries of presumptions that lead to 
the conclusion that this category would not contain any wholly domestic communications. Aug, 
30 Submission at 4-8, The Court questions the validily of thoée presumptions, as applied to 
wholly domestic communications, but ceitainly is not inclined to apply them to assessing the 
likelihood that MCTs might contain communications of or conceming United States persons, or 
communications to or from persons in the United States* The active users for some of thèse 



43 (...continued) 

(approximately 52%) had a non-target active user who was reasonably believed to be located 
outside the United States. Àug. 1 6 Submission at 4-5 . Fifty-two percent of the L29 to 1 ,39 
million MCTs that NSÀ assessed were acquired through its upstream collection every six months 
would work out to 670,800 - 722,800 MCTs, or approximately 1 .3-1 .4 million MCTs per year 
that have a non-target active user believed to be located outside the United States. 



* NSA determined that 224 MCTs of the 5,081 MCTs acquired during a six-month 




From this, NSA concluded that it acquired between 48,609 

and 70,168 such MCTs every six months through its upstream collection (or approximately 
97>000-l 40,000 such MCTs each year), Il at 9 n.27. 
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MCTs may be located in the United States, and, even if the active user is located overseas, the 

MCTs may contain non-target communications of or concerning United States persons or that are 
to or from persons in the United States. Accordingly, thîs "unknown" category likely adds 
substantially to the number of non-target communications of or concerning United States persons 
or that are to or fl'om persons in the United States being acquired by NSÀ each year. 

In sum, then, NSA' s upstream collection is a small, but unique part of the goveroment's 
overall collection under Section 702 of the FAA. NSÀ acquires valuable information through its 
upstream collection, but not without substantial intrusions on Fourth Amendment-protected 
interests, Indeed, the record before this Court establishes that NSÀ's acquisition of Internet 
transactions likely results in NSA acquiring annually tens of thousands of wholly domestic 
communications* and tens of thousands of non-target communications of persons who have Httle 
or no relationship to the target but who are protected under the Fourth Amendaient Both 
acquisitions raise questions as to whether NSA's targeting and minimization procédures comport 
with FISA and the Fourth Àmendment 

2. NSA's .Targeting Procédures 

The Court will fîrst consider whether NS A's acquisition of Internet transactions through 
its upstream collection, as described above, means thatNSA's targeting procédures, as 
implemented, are not "reasonàbly designed" to: 1) "ensure that any acquisition authorized under 
[tlie certifications] is limited to targeting persons reasonably believed to be located outside the 
United States"; and 2) "prevent the intentional acquisition of any communication as to which the 
sender and ail intended récipients are knovm at the time of the acquisition to be located in the 
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United States," 50U.S.C. § 1881a(d)(l);id § (i)(2)(B). The Court conoludes that the mannerin 

which NSA is currently implementing the targeting procédures does not prévent the Court ftom 

making the necessary fîndings, and henee NSA*s ta? geting procédures do not offend FISA. 

a Targeting Persons Reasonobly Beîieved to be Located 
Outside the United States 

To the extent NSA is acquiring Internet transactions that contain a single discrète 

communication that is to> from, or about a tasked selector, the Court's previous analysts remains 

valid. As explained in greater détail in the Court* s September 4, 2008 Mémorandum Opinion, in 

this selting the person being targeted is the user of the tasked selector, and NSA' s pre-targeting 

and post-targeting procédures ensure that NSA will only acquire such transactions so long as 

there is a reasonable belief that the target is located outside the United States» Docket No, 



But NSÀ's acquisition of MCTs complicates the Courtes analysis somewhat Wîth regard 
to "about" communications, the Court previously found that the user of the tasked facility was 
the "target" of the acquisition, because the govemmenfs purpose in acquiring such 
communications is to obtain information about that user. Ses jkL at 18, Moreover, the 
communication is not acquired because the govemment has any interest in the parties to the 
communication, other than their potential relationsliip to the u ser of the tasked facility, and the 
parties to an "about" communication do not become targets unless and until they are separately 
vetted under the targeting procédures. See id, at 18^19, 

In the case of "about" MCTs - Le^ MCTs that are acquired because a targeted selector is 
referenced somewhere in the transaction - NSA acquires not only the discrète communication 
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that références the tasked selector, but also in many cases the contents of other discrète 

communications that do not référence the tasked selector and to which no target is a party. See 
May 2 Letter at 2-3 flflHHH^HHHNI % acquiring such MCI s, NSA likely 
acquires tens of thousands of additional communications of non-targets each year, many of 
whom have no relationship whatsoever with the user of the tasked selector, While the Court has 
concems about NSA's acquisition of thèse non-target communications, the Court accepts the 
govemmenfs représentation that the "sole reason [anon-target's MCT] is selected for 
acquisition is that it contains the présence of a tasked selector used by aperson who has been 
subjected to NSA's targeting procédures " June 1 Submission at 4. Moreover, at the time of 
acquisition, NSA's upstream collection devices often lack the capability to détermine whether a 
transaction contains a single communication or multiple communications, or to identify the 
parties to any particular communication within a transaction, geç ii Therefore, the Court has 
no reason to believe that NSA, by acquiring Internet transactions containing multiple 
communications^ is targeting anyone other than the user of the tasked selector. £ee United States 
v. Chemical Found,, Inc v 272 U.S. 1 ? 14-15 (1926) ("The presumption of regularity supports the 
officiai acts of public officers, and 5 in the absence of clear évidence to the contrary, courts 
présume that they have properly discharged their officiai duties"). 

b. Acquisition of Wholly Domestic Communications 
NSA's acquisition of Internet transactions complicates the analysis required by Section 
1881 a(d)(l)(B), since the record shows that the government knowingly acquires tens of 
thousands of wholly domestic communications each year* At first blush, it might seem obvious 
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that targetiûg procédures that permit .such acquisitions could not be "reasonably desigtied * . , to 

prevent the intentional acquisition of any communication as to which the sender and ail intended 
récipients are known at the time of the acquisition to be located in the United States," 50 U.S.C. 
§ 1881a(d)(l)(B). However, a doser examination of the knguage of the statute leads the Court 
to a différent conclusion, 

The government focuses primarily on the "intentional acquisition'* language in Section 
188 la(d)(l)(B), Specifkally, the govemment argues that NSA is not "intentionally" acquiring 
wholly domestic communications because the governnient does not intend to acquire transactions 
contaîning communications that are wholly domestic and has hnplernented technical means to 
prevent the acquisition of such transactions, See June 28 Submission at 12. This argument fails 
for seyerai reasons, 

NSÀ targets aperson under Section 702 certifications by acquiring communications to 5 
from, or about a selector used by that person. Therefore» to the extent NSA's upstream collection 
devices acquire an Internet transaction contaîning a single, discrète communication that is to, 
from, or about a tasked selector, it can hardly be said that NSÀ' s acquisition is "unintentional" 
In fact, tlie government has argued> and the Court has accepted, that the govemment intentionally 
acquires communications to and from a target, even when NSÀ reasonably - albeit mistakenly ~ 
believes that the target is located outside the United States, gee DocketNo, MHHflH^HI 



With respect to MCTs, the sole reason NSA acquires such transactions is the présence of 
a tasked selector within the transaction, Because it is teehnologically infeasible for NSÀ' s 
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upstream collection devices to acquire only the discrète conummication to, from, or about a 

tasked seiector that may be contained within an MCT, however, the government argues that the 
only way to obtain the foreign intelligence information found within the discrète communication 
is to acquire the entire transaction in which it is contained. June 1 Submission at 21 . As a resuit, 
the government intentîonally acquires ail discrète communications within an MCT, including 
those that are not to, from or about a tasked selector, See June 28 Submission at 12, 14; see also 
Sept, 7, 201 1 Hearing Tr. at 33-34, 

The fact that NSA' s technical measures cannot prevent NSA from acquiring transactions 
containing wholly domestic communications under certain circumstances does not render NSA's 
acquisition of those transactions "unintentional The government repeatedly characterizes such 
acquisitions as a "failure" of NSA* s "technical means," June 28 Submission at 12; see also Sept, 
7, 2011 Hearing Tr, at 35-36. However, there is nothing m the record to suggest that NSA's 
technical means are malfunctioning or otherwise failing to opemte as designed, Indeed, the 
government readily concèdes that NSA will acquire a wholly domestic "about" commimication if 
the transaction containing the communication is routed through an international Internet link 
being monitored by NSA or is routed through a foreign server. See June 1 Submission at 29, 
And ha the case of MCTs containing wholly domestic communications that are not to, ftom, or 
about a tasked selector, NSA has no way to détermine, at the time of acquisition, that a particular 
communication within an MCT is wholly domestic. See idL Furthermore, now that NSA*s 
manual review of a sample of its upstream collection has confirmed that NSA likely acquîtes 
tens of thousands of wholly domestic communications each year, there is no question that the 
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government is knowingly acquiring Internet transactions that contain wholly domestio 

communications through its upstream collection, 43 

The government argues that an NSÀ analyses post-acquisition discovery that a particular 
Internet transaction contains a wholly domestio communication should retroactively render 
NSÀ's acquisition of that transaction "unmtentionai." June 28 Submission at 12, That argument 
is unavailing* NSÀ's collection devices are set to acquire transactions that contain a référence to 
the targeted selector. When the collection device acquires such a transaction, it is functioning 
precisely as it is intended, even when the transaction includes a wholly domestic communication, 
Ttie language of the statute makes clear that it is the govemmenfs intention at the time of 
acquisition that matters, and the goverrrment conceded as much at the hearing in this matter, 
Sept. 7, 201 1 Hearing Tr, at 37-38. 

Accordingly, the Court fînds that NSA intentionally acquires Internet transactions that 
référence a tasked selector through its upstream collection with the knowledge that there are tens 
of thousands of wholly domestic communications contained within those transactions. But this 
is not the end of the analysis, To return to the language of the statute, NSÀ's targeting 
procédures must be reasonably designed to preventthe intentional acquisition of "any 
conmnioication as to whichthe sender and ail intended récipients are Icnown at the time of 



43 It is generally settled that a person intends to produce a conséquence either (a) when he 
acts with a purpose of producing that conséquence or (b) when he acts knowing that the 
conséquence is substantially certain to occur. Restatement (Third) of Torts § 1 (2010); see also 
United States v, Dver , 589 F.3d 520, 528 (lst Ch\ 2009) (in criminal law, "Mutent 5 ordinaiily 
requires only that the défendant reasonably knew the proscribed resuit would occur")> oert. 
demed, 130 S, Ct 2422(2010). 
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acquisition to be located in the United States," 50U.S.C, § 1881a(d)(l)(B) (emphasis added), 

The underscored language requires an acquisition-by-acquisition inquîry. Thus, the Court must 
consider whether, at the time NSÀ intentionally acquires a transaction through its upstream 
collection, NSÀ will know that the sender and ail intended récipients of any particular 
communication within that transaction are located in the United States, 

Presently, it i$ not technically possible for NSÀ to configure its upstream collection 




effect of this teelinological limitation is that NSÀ cannot know at the time it acquires an Internet 
transaction whether the sender and ail intended récipients of any particular discrète 
communication contained within the transaction are located inside the United States, 




Seegup£â, note 33. 
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Given that NSA* s upstream collection devices lack the capacity to detect wholly domestic 
communications at the time an Internet transaction is acquired, the Court is inexorably led to the 
conclusion that the targeting procédures are "reasonably designed" to prevent the httentional 
acquisition of any communication as to which the sender and ail intended récipients are known at 
the time of the acquisition to he located in the United States, This is true despite the fact that 
NSA kixows with certainty that the upstream collection, viewed as a whole, résulta in the 
acquisition of wholly domestic communications. 

By expanding its Section 702 acquisitions to include the acquisition of Internet 
transactions through its upstream collection, NSAhas, as apractical matter, circumvented the 
spirit of Section 1881a(b)(4) and (d)(l) with regard to'that collection. NSA's knowing 
acquisition of tens of thousands of wholly domestic communications through its upstream 
collection is a cause of conoern for the Court. But the meardng of the relevant statutoiy provision 
is clear and application to the facts before the Court does not lead to an impossible or absurd 
resuit, The Court' s review does not end with the targeting procédures, however, The Court must 
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also consider whether NSA*s minimization procédures are consistent with §1881a(e)(l) and 

whether NSA* s targeting and minimization procédures are consistent with ttie requirements of 

the Fourth Amendment 

3, NSA's Minimization Procédures, As Applied to MCTs in the Manner 
Proposed by the Government. Do Not Meet PISA's Définition of 
. "Minimization Procédures'* 

The Court next considers whether NSA' s minimization procédures, as the govemment 
proposes to apply them to Internet transactions, meet the statutory requirements, As noted above, 
50 U.S.C. § 1881a(e)(l) requires that the minimization procédures "meet the définition of 
minimization procédures under [50 U.S.C. §§] 1801 (h) or 1821(4) , , . That définition requires 
"spécifie procédures, which shall be adopted by the Attorney General, that are reasonably 
designed in light of the purpose and technique of the particular [surveillance or physical search], 
to minimize the acquisition and rétention, and prohibit the dissémination, of nonpublicly 
available information conceming unconsenting United States persons consistent with the need of 
the United States to obtain, produce, and disseminate foreign intelligence information." 50 
U.S.C. §§ 1801(h)(l) & 1821 (4)(A). For the reasons stated below, the Court concludes that 
NSA* s minimization procédures, as appiied to MCTs in the manner proposed by the govemment, 
do not meet the statutory définition in ail respects. 

a, The Minimization Framework 

NSA* s minimization procédures do not exprès sly contemplate the acquisition of MCTs, 
and the language of the procédures does not lend itself to straightforward application to MCTs, 
Most notably* various provisions of the NSA minimization procédures employ the term 
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"communication" as an operative term, As explained below, for instance, the mies governing 

rétention, handling, and dissémination vaiy depending whether or not a communication is 
deemed to constitute a "domestic communication" instead of a "foreign communication/' £ee 
NSA Minimization Procédures §§ 2(e), 5, 6 > 7; a communication "of * or "conceming" a U.S, 
person, see id §§ 2(b)-(cX 3(b)(l)-(2) > 3(c); a "communication to, from, or about a target/' M, 
§ 3(b)(4); or a "communication . . . reasonably believed to contain foreign intelligence 
information or évidence of a crime," id. But MCTs can be fairly described as communications 
that contain several smaller communications, Àpplying the terms of the NSA minimization 
procédures to MCTs rather than discrète communications can produce very différent resuite. 

In a récent submission., the government explained howNSA proposes to apply its 
minimization procédures to MCTs. Seg Àug. 30 Submission at 8-1 1. 45 Before discussing the 
measures proposed by the government for handling MCTs, it is helpfal to begin with a brief 
overview of the NSA minimization procédures themselves, The procédures require that ail 
acquisitions "will be conducted in a manner designed, to the greatest extent feasible» to minimize 
the acquisition of information not relevant to the authorized purpose of the collection." NSA 



45 Although NSA has been collecting MCTs since before the Court' s approval of the flrst 
Section 702 certification in 2008, seç June 1 Subinission at 2 5 it has not, to date, applied the 
measures proposed here to the fruits of its upstream collection, Indeed, until NSA's manual 
review of a six-month sample of its upstream collection revealed the acquisition of wholly 
domestic communications, the government asserted that NSA had never found a wholly domestic 
communication in its upstream collection, gee 
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Minimization Procédures § 3(a).^ 6 Following acquisition, the procédures require that, "[a]s a 
communication is reviewed, NSA analyses) will détermine whetlier it is a domestic or foreign 
communication to 5 fi'om, or about atarget and is reasonably believed to contain foreign 
intelligence information or évidence of a crime" JcL § 3(b)(4). "Foreign communication means 
a communication that lias at least one communicant outside of the United States " Id. § 2(e). 
"Ail other communications, including communications in which the sender and ail intended 
récipients are reasonably believed to be located in the United States at the time of acquisition* are 
domestic communications " EL In addition, domestic communications include "[a]ny 
communications acquired through the targeting of a person who at the time of targeting was 
reasonably believed to be located outside the United States but is in fact located inside the United 
States at the time such communications were acquired, and any communications acquired by 
targeting a person who at the time of the targeting was believed to be a non-Uoited States person 

but was in fact a United States person " KL § 3(d)(2). A domestic communication must be 

"promptly destroyed upon récognition unless tlie Director (or Aoting Director) of NSA 
specifîcally deteriniiies, in writing, thaf ' the communication contains foreign intelligence 



* 6 Of course, NSA 3 s separate targeting procédures, discussed above, also govem the 
manner in which communications are acquired. 
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information or évidence of a crime, or that it falls into another narrow exception permitting 
rétention, gee kl § 5. 47 

Upon determining that a communication is a "foreign communication," NSA must décide 
whether tfae communication is "of" or "concerning" a United States person. Id. § 6. 
''Communications of a United States person include ail communications to which a United States 
person is a party." KL § 2(c), "Communications concerning a United States person include ail 
communications in which a United States person is discussed or mentioned, except where such 
communications reveal only publicly-available information about the person" KL § 2(b). 

A foreign communication that is of or concerning a United States person and that is 
determined to contain neither foreign intelligence information nor évidence of a crime must be 
destroyed "at the earfiest practîcable point in the processing cycle" and "may be retained no 
longer than five years ftom the expiration date of the certification in any event" M. § 3(b)(l). 48 



47 Once such a détermination is made by the Director, the domestic communications at 
issue are effectively treated as "foreign communications" for purposes of the rules regarding 
rétention and dissémination, 

48 Although Section 3(b)(l) by its terms applies only to "inadvertently acquired 
communications of or concerning a United States person," the government has informed the 
Court that this provision is intended to apply, and in practice is applied, to âU foreign 
communications of or concerning United States persons that contain neither foreign intelligence 
information nor évidence of a crime, Docket No, 702(i>08-01, Sept. % 2008 Notice of 
Clarification and Correction at 3-5. Moreover, Section 3(c) of the procédures separately provides 
that foreign communications that do not qualify for rétention and that "are knovm to contain 
communications of or concerning United States persons wili be destroyed upon récognition," 
and, like unreviewed communications, "may be retained no longer than five years ftom the 

(continued,,,) 
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A foreign communication that is of or conceming a United States person may be retained 
indefmitely if the "dissémination of such communications with référence to such United States 
persons would be permitted" under the dissémination provisions that are discussed below 3 or if it 
contains évidence of a crime. KL § 6(a)(2)-(3), If the rétention of a foreign communication of or 
concemiiig a United States person is "necessary for the maintenance of technicai databases," it 
may be retained for five y cars to allow for technicai exploitation, or for longer than fîve years if 
more time is required for decryption or if the NSA Signais Intelligence Director "détermines in 
writing that rétention for a longer period is required to respond to authorized foreign intelligence 
or counterinteliigence requirements " Id, § 6(a)(l). 

As a gênerai mle 3 "[a] report based on communications of or conceming a United States 
person may be disseminated" only "if the identity of the United States person is deleted and a 
generic term or symbol is substituted so that the information cannot reasonably be connected 
with an identifiable United States person." Id, § 6(b), A report including the identity of the 
United States person may be provided to a "récipient requiring the identity of such person for the 
performance of officiai duties," but only if at least one of eight requirements is also met - for 
instance, if "the identity of the United States person is necessary to understand foreign 
intelligence information or assess its importance," or if "information indicates the United States 



48 (...continued) 

expiration date of the certification authorizing the collection in any event" 
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person may be , , . an agent of a foreign power" or that lie is "engaging in international terrorism 
activities " JM, 49 

ô. Proposed Minimhation Measures for MCTs 
The government proposes that NSA 5 s minimization procédures be applied to MCTs in 
the folio wing manner. Àfter acquisition, upstream acquisitions, xncluding MCTs; will réside in 
NSA repositories until they are accessed (e,g M in response to a query) by an NSA analyst 
peribrming his or lier day-to-day work. NSA proposes adding a "cantionary banner" to the iools 
its analysts use to view the content of coiniminicationa acquired through upstream collection 
under Section 702. See Aug, 30 Submission at 9, The banner,, wliich will be "broadly displayed 
on [such] tools/ 5 will "direct analysts to consult guîdance on howto identify MCTs and how to 
handle them " IdL at 9 & n.6. 50 Analysts will be trained to identify MCTs and to recognîze 
wholly domestic communications contained within MCTs, See id. at 8-9. 

When an analyst identifies an upstream acquisition as an MCT, the analyst will décide 
whether or not he or she "seek[s] to use a discrète communication within [the] MCT 5 " 

49 The procédures also permit NSA to provide unminimized communications to^H 
m FBI (subject to their own minimization procédures), and to foreign govemments for the 
limited purpose of obtaining "technical and linguistic assistance," NSÀ Minimfàation 
Procédures §§.6(c), 8(b). Neither of thèse provisions has been used to share upstream 
acquisitions, Sept 7, 2011 HearlngTr, at 61-62. 

50 The batmer will not be displayed for communications that "can be first identifîed 
through technical means where the active user is NSA' s tasfced seleetor or that contain only a 
single, discrète communication based on particular stable and well-known protocols. 5 ' Aug, 30 
Submission at 9 n*6. gee iaffca, note 27, and supra, note 54. 
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presumably by reviewing some or ail of the MCT's contents, IçL at 8 ( 51 "NSA analyste seeking 

to use a discrète communication contained in an MCT (for example, in a FISA application, 

intelligence report, or Section 702 targeting) will assegs whether the discrète communication is 

to, fïom, or about a tasked selector" IdU The following framework will then be applied: 

If the discrète communication that the analyst seeks to use is to, ôom, or about a tasked 
selector, "any U.S. person information in that communication will be handled m 
accordance with the NSA minimization procédures " 14, Presumably, this means that the 
discrète communication will be treated as a "fbreign communication" that is "of 5 or 
"concerning" a United States person, as described above, The MCT containing that 
communication remains available to analysts in NSA* s repositories without any marking 
to indicate that it has been identified as an MCT or as a transaction containing United 
States person information. 

• If the discrète communication sought to be used is natte, from, or about a tasked 
selector, and also not to or from an identifiable United States person, "that 
communication (including any U,S, person information therem) will be handled in 
accordance with the NSA minimization procédures," Id. at 8«9, 52 Presumably, this 
means that the discrète communication will be treated as a "fbreign communication" or, if 
it contains information concerning a United States person, as a "fbreign communication" 
"concerning a United States person," as described above. The MCT itsetf remains 
available to analysts in NSA' s repositories without any marking to indicate that it has 
been identified as an MCT or that it contains one or more communications that are not to, 
from, or about a targeted selector. 



51 A transaction that is identified as an SCT rather than an MCT must be handled in 
accordance with the standard minimization procédures that are discussed above. 

52 The Coiu-t understands that absent contraty information, NSA treats the user of an 
account who appears to be located in the United States as "an identifiable U.S. person " ges 
Aug, 30 Submission at 9 n.7 ("To help détermine whether a discrète communication not to, from, 
or about a tasked selector is to or from a U.S. person, NSA would perform the same sort of 
technicai analysis it would perform beforetasking an electronic communications 
account/address/identifier in accordance with its section 702 targeting procédures,"), 
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• À discrète communication that is not to, from, or about a tasked selector but that is to or 
from an identifiable United States person "cannot be used for any purpose other tlian to 
protect against an immédiate threat to human life (e.g. 5 force protection or hostage 
situations),*' 14 at 9. Presumably, this is a référence to Section 1 of the minirnization 
procédures, which allows NSA to deviate from the procédures in such narrow 
circumstances, subject to the requirement that prompt notice be given to the Office of the 
Directe of National Intelligence, the Department of Justice, and the Court that the 
déviation lias occurred, Regardless of whether or not the discrète communication is used 
for this limited purpose, the MCT itself remains in NSA's databases without any marking 
to indicate that it is an MCT, or that it contahs at least one communication that is to or 
from an identifiable United States person. £e§ içL; Sept. 7, 2011 Hearing Ti\ at 61. 

• If the discrète communication sought to be used by the analyst (or another discrète 
communication within the MCT) is recognized as being wholly domestic, the entire MCT 
will be purged from NSA's Systems. See Aug, 30 Submission at 3. 

c. Statutory Ânaîysis 

i Acquisition 

The Court first considers how NSA's proposed handling of MCTs bears on whether 
NSA's minirnization procédures are "reasonably designed b light of the purpose and technique 
of the particular surveillance, to mhihnize the acquisition , . , of nonpublicly available 
information concerning unconsenting United States persons consistent with tlie need of the 
United States to obtain, produce, and disseminate foreign intelligence information" jSee 50 
U,3,C, § 1801(h)(l) (emphasis added), Insofar as NSA likely acquires approximately 2,000- 
10,000 MCTs each year that contain at least one wholly domestic communication that is neither 
to 5 from, nor about a targeted selector, 53 and tens of thousands of communications of or 



As noted above, NSA's upstream collection also likely results in the acquisition of tens 

(continued.,,) 
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concerning United States persons with no direct connection to any target, the Court lias serions 
ooncerns. The acquisition of such non-target communications, whicli are highly unlikely to have 
foreign intelligence value, obviously does not by itself serve the government's need to "obtain, 
produce, and disseminate foreign intelligence information." See 50 U,S.C. § 1801(h)(l). 

The government submits, however, that the portions of MCTs that contain références to 
targeted selectors arelikely to contain foreign intelligence information, and that it is not feasible 
for NSA to Iimit its collection only to the relevant portion or portions of each MCT - he„ the 
particular discrète communications that are to, from, or about a targeted selector, The Court 

53 (,MContinued) 

of thousands of wholly domestic SCTs that c ontain réfé re nces to targeted selectors » See supra, 
pages 33-34 & note 33 (discussing the limits^^mB^^^BBIHBl^^B^B^BHB 



domestic "about" SCTs is troubling, they do not mise the same minimizatton-related concerna as 
discrète, wholly domestic communications that are neither to, from, nor about targeted selectors, 
or as discrète communications of or conceming United States persons with no direct connection 
to any target, either of which may be contained within MCTs. The Court has effectively 
concluded that certain communications containing a référence to a targeted selector are 
reasonably likely to contain foreign intelligence infomiation, including communications between 
non-target accounts that contain the name of the targeted facility in the body of the message, See 
DocketNo* 07-449, May 31, 2007 Primaty Order at 12 (flnding probable cause to believe that 
certain "about" communications were "themselves being sent and/or received by one of the 
targeted foreign powers"). hisofar as the discrète, wholly domestic "abouf 5 communications at 
issue here are communications between non-target accounts that contain the name of the targeted 
facility, the same conclusion applies to tliem. Accordingly, in the language of FlSA's définition 
of minimization procédures, the acquisition of wholly domestic communications about targeted 
selectors will generally be "consistent with the need of the United States to obtain, produce, and 
disseminate foreign intelligence information." SeeSOTLS.C, 1801(h)(l)> Nevertheless, the 
Court understands that in the event NSA identifies a discrète, wholly domestic "abouf 
communication in its databasès, the communication will be destroyed upon récognition. See 
NSA Minimization Procédures § 5. 
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accepts the govemment's assertion that the collection of MCTs yielcls valuable foreign 
intelligence information that by its nature cannot be acquixed except through upstream collection. 
See Sept, 7, 201 1 Hearing Tr. at 69-70, 74, For purposes of this discussion, the Court forte 
accepts the government's assertion that it is not feasible for NSA to avoid the collection of MCTs 
as part of its upstream collection or to limit its collection only to the spécifie portion or portions 
of each transaction that contains the targeted selector, See at 48-50; lune 1 Submission at 
27, 54 The Court therefore concludes that NSA 1 s mhnmization procédures are, giventhe current 
state of NSA's technical capability, reasonably designed to minimise the acquisition of 
nonpublicly availabie infonnation concerning unconsenting United States persons consistent wth 
the need of the United States to obtain, produce, and disseminate foreign intelligence 
information. 



In any event, it is incumbent upon NSA to continue working to enhance its capability to 
limit acquisitions only to targeted communications. 




r 
i 



i 
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il Rétention 

The principal problem with the governmenfs proposed handling of MCTs relates to what 
will occur, and what will bqî occur, following acquisition, As noted above, the NSA 
minimization procédures generally require that, "[a]s a communication is reviewed, NSA 
analyst(s) will détermine whether it is a domestic or foreign communication to» ftorn, or about a 
target and is reasonably believed to contain foreign intelligence information or évidence of a 
crime" see NSA Minimization Procédures § 3(b)(4), so that it can be promptly afforded the 
appropriate treatment imder the procédures- The measures proposed by the government for 
MCTs, however, largely dispense with the requirement of prompt disposition upon initial review 
by an analyst Rather than attempting to identify and segregate information "not relevant to the 
authorized purpose of the acquisition" or to destroy such information promptly following 
acquisition, NSA's proposed handling of MCTs tends to maximize the rétention of such 
information, including information of or conceming United States persons with no direct 
connection to any target Seeid § 3(b)(l), 

The proposed measures focus almost exclusively on the discrète communications within 
MCTs that analysts décide, after review, that they wish to use, See Aug. 30 Submission at 8-10. 
An analyst is not obligated to do anything with other portions of the MCT ? including any wholly 
domestic discrète communications that are not immediately recognized as such, and 
communications of or conceming United States persons that have no direct connection to the 
targeted selector. See id; Sept. 7, 20 11 Hearing Tr. at 61. It; after reviewbig the contents of an 
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entire MCT, the analyst décides that he or she does not wish to use any discrète communication 

contained therein, the analyst is not obligated to do anything unless it is immediately apparent to 
him or her that the MCT contains a wholly domestio communication (in which case the entrée 
MOT is deleted). 55 See Aug, 30 Submission at 840, 

Except in the case of those recognized as containing at least one wholly domestio 
communication, MCTs that have been reviewed by analysts remain available to other analysts in 
NSA' s repositories without any madctng to identify them as MCTs, See |d; Sept, 7 5 2011 
Hearing Tr. at 61 . Nor will MCTs be marked to identify them as containing discrète 
communications to or fiom United States persons but not to or ftom a targeted seiector> or to 
indicate that they contain United States person information, gee Aug. 30 Submission at 8-1 0; 
Sept 7 5 2011 Hearing Ti\ at 61. Ail MCTs except those identified as containing one or more 
wholly domestic communications will be retained for a minimum of five years, The net effect is 
that thousands of wholly domestic communications (those that are never reviewed and those that 
are not recognized by analysts as being wholly domestic), and thousands of other discrète 



55 The govemmenf s submissions rnake clear that, in many cases, it will be diffîcult for 
analysts to détermine whether a discrète communication contained within an MCT is a wholly 
domestic communication. NSA' s récent manual review of a six-month représentative sample of 
its upstream collection demonstrates how challenging it can be for NSA to recognize wholly 
domestic communications, even when the agency's Ml attention and effort are directed at the 
task. See generally Aug. 16 and Aug. 30 Submissions» It is doubtful that analysts whose 
attention and effort are focused on identifying and analyzing foreign intelligence information will 
be any more successful in identifying wholly domestic communications, frideed, each year the 
govermnent notifies the Court of numerous compliance incidents involving good-faith mistakes 
and omissions by NSA personnel who work with the Section 702 collection, 
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communications that are not to or from a targeted selector but that are to, from» or conceming a 

United States person, will be retained by NSA for at least five years, despite the fact that they 

have no direct connection to a targeted selector and, therefore, are unlikely to contain foreign 

intelligence information. 

It appears that NSA could do substantially more to minimise the rétention of 

information conceming United States persons that is unrelated to the foreign intelligence propose 

of îts upstream collection, The government has not, for instance demonstrated why it would not 

be feasible to limit access to upstream acquisitions to a smalier group of specially-trained 

analysts who could develop expertise in identifying and scrutmîzing MCTs for wholly domestic 

communications and other discrète communications of or concerning United States persons. 

Altematively, it is unclear why an analyst worldng v/ithin the framework proposed by the 

government should not berequired, after identifying an MCT, to apply Section 3(b)(4) of the 

NSA minimization procédures to each discrète communication within the transaction. As noted 

above, Section 3(b)(4) states that "[a]s a communication is reviewed, NSA analyst(s) will 

détermine whether it is a domestic or foreign communication to, fh>m, or about a target and is 

reasonably believed tô contain foreign intelligence information or évidence of a crime," NSA 

Minimization Procédures § 3(b)(4). If the MCT contains information "of } or "concerning" a 

United States person within the meaning of Sections (2)(b) and (2)(o) of the NSA minimization 

procédures, it is unclear why the analyst should not be required to mark it to identify it as such, 

At a minimum, it seems that the entire MCT could be marked as an MCT. Such markings would 
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alert other NSA personnel who might encounter the MCT to take care in reviewing it, thus 

reducing the risk of error that seerns to be inhérent in the raeasures proposed by the government, 
which are applied by each analyst, acting alone and without tiie benefit of his or her colleagues' 
prior efforts, 56 Another potentially helpful step might be to adopt a shorter rétention period for 
MCTs and mireviewed upstream communications so that such information "âges off 5 and is 
deleted fi'om NSA's repositories in less than fîve years. 

This discussion is not intended to provide a checklist of changes that» if made ? would 
necessarily bring NSA' s mimmization procédures into compliance with the statute. Indeed, it 
may be that some of thèse measures are impraticable, and it may be that there are other plausible 
(perhaps even better) steps that could be taken that are not mentioned here, But by not fully 
exploring such options, the government has failed to demonstrate that it has strack a reasonable 
balance between its foreign intelligence needs and the requirement that information concerning 
United States persons be protected, Under the circumstances, the Court is unable to fmd fhat, as 
applied to MCTs in the raanner proposed by the government, NSA's minimization procédures 
are "reasonably designed in light of the propose and technique of the particular surveillance to 
minimize the . . . rétention . , , of nonpublicly available information concerning unconsenting 



56 The government recentiy acknowledged that "if s pretty clear that it would be better" if 
NSA used such marfcings but that "[t]he feasibility of doing that [had not yet been] assessed 
Sept. 7, 201 1 Hearfng Ti\ at 56, 
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United States persons consistent with the need of the United States to obtain, produce, and 

disseminate foreign intelligence information." 57 See 50 U.S.C. §§ 1801(h)(l) & 1821(4)(A), 

iii Dissémination 

The Court next turns to dissémination, Àt the otrtset, it must be nated tlmt FISA imposes 
a stricter standard for dissémination than for acquisition or rétention. While the statute requires 
procédures that are reasonably designed to " minimize ** the acquisition and rétention of 
information conceming United States persons consistent with the need of the United States to 
obtaîn, produce, and disseminate foreign intelligence information, the procédures must be 
reasonably designed to " prohibit " the dissémination of information concerning United States 
persons consistent with that need. See 50 U.S,C. § 1801(h)(l) (emphasis added). 



57 NSÂ's minimization procédures contain two provisions that state, in part, that "[f|h& 
communications that may be retained [byNSA] include electronic communications acquir ed 
because of limitations 




The government further represented that it "ha[d] not seen" such a 
circumstance in collection under the Protect America Act ("PAA"), which was the predecessor to 
Section 702. IdL at 29, 30, And although NSA apparently was acquiring Internet transactions 
under the PA A, the government made no mention of such acquisitions in connection with thèse 
provisions of the minimization procédures (or otherwise), §ee î& at 27-3 1 . Accordingly, the 
Court does not read this language as purportlng to justify the procédures proposed by the 
government for MCTs, In any event, such a reading would, for the reasons stated, be 
inconsistent with the statutory requirements for minimization. 
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As the Court understands it, no United States-person-identifyiiig information contained in 

any MCT will be disseminated except in accordance with the gênerai requirements of NSA's 
minimization procédures for "foreign communications" "of or concerning United States persons" 
that are discussed above* Specifîcally 9 "[a] report based on communications of or concerning a 
United States person may be disseminated* 5 only "if the identity of the United States person is 
deleted and a generic term or symbol is substituted so that the information cannot reasonably be 
connected with an identifiable United States person " NSA Minimization Procédures § 6(b), À 
report including the identity of the United States person may be provided to a "récipient reqwring 
the identity of such person for the performance of officiai duties " but only if at least one of eight 
requirements is also met - for instance, if "the identity of the United States person is necessary to 
understand foreign intelligence information or assess its importance," Id. 5S 

This limitation on the dissémination of United States~person4dentifying information is 
helpftïh But the pertinent portion of FISA's définition of mmimization procédures applies not 
merely to information that identifies United States persons, but more broadly to the 
dissémination of "information concernin g unconsenting United States persons." 50 US.C, § 
1 801(h)(l) (eraphasis added). 59 The government has proposed several additional restrictions that 

58 Although Section 6(b) uses the term "report," the Court understands it to apply to the 
dissémination of United States-person-identifying niformation in any form. 

59 Another provision of the définition of minimization procédures bars the dissémination 
of information (other than certain forms of foreign intelligence information) "in a marner that 

(continued.,.) 
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will have the effect of Ihnif mg the dissémination of "nonpublicly available information 

concerning unconsenting United States persons consistent with tlie need of the United States to 

disseminate foreign intelligence information;" Id, First^ as noted above, the government will 

destroy MCTs that are recognized by analysts as containing one or more discrète wholly 

domestic communications» Second, the goveniment lias asserted that NSA will not use any 

discrète communication within an MCT that is determined to be to or fi'om a United States 

person biît not to, from, or about a targeted selector, except when necessary to protect against an 

immédiate threatto human life. See Aug, 30 Submission at 9, The Court understands this to 

mean, among other things, that no information ôom such a communication will be disseminated 

in any form unless NSA détermines it is necessary to serve this spécifie purpose. Third, the 

government has represented that whenever it is unable to conftrm that at least one party to a 

discrète communication contained in an MCT is located outside the United States, it will not use 

any information contained in the discrète communication, See Sept» 7,2011 Hearing Tr. at 52, 

The Court understands this limitation to mean that no information from such a discrète 

communication will be disseminated by NSA in any form. 

Communications as to which a United States person or a person inside the United States 

59 (,..contmued) 

identifies any United States person/ 5 except when the person's identity is necessary to understand 
foreign intelligence information or to assess its importance* See 50 U.S.C. §§ 1801(h)(2) ? 
1 821(4)(b). Congress's use of the distinct modifying terms "concerning" and "identifying" in 
two adjacent and closely-related provisions was presumably intended to have meaning. £ee ? e.g„ 
Russello v. United States , 464 U.S. 16, 23 (1983). 
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is a party are more likely than other communications to contain information conceming United 

States persons. And when such a communication is neither to* ftom, nor about a targeted facility, 
it is highly unlikely that the "need of the United States to disseminate foreign intelligence 
information" would be served by the dissémination of United States-person information 
contained therein, Hence* taken together, thèse measures will tend to prohibit the dissémination 
of information conceming unconsenting United States persons when there is no for eign- 
intelligence need to do so, 60 Of course, the risk remains that information concerning United 
States persons will not be recognized by NSA despite the good-faith application of the measures 
it proposes. But the Court cannot say that the risk is so great that it undermines the 
reasonableness of the measures proposed by NSA with respect to the dissémination of 
information concerning United States persons, 61 Accordingly, the Court concludes that NSA's 



60 Another measure that, on balance, is likely to mitigate somewhattlie risk that 
information concerning United States persons will be disseminated in the absence of a foreign- 
intelligence need is the recently-proposed prohibition on rutming queries of the Section 702 
upstream collection using United States-person identifiers, Se§ Aug, 30 Submission at 10-11. 
To be sure, any query, including a queiy based on non-United States-person information, could 
yield United States-person inf formation. Nevertheless, it stands to reason that queries based on 
information: concerning United States persons are at least somewhat more likely than other 
queries to yield United States-person information. Insofar as information concerning United 
States persons is not made available to anaiysts, it cannot be disseminated. Of course, tins 
querying restriction does not address the rétention problem that is discussed above. 

61 In reaching this conclusion regarding the risk that infomiation concerning United 
States persons might be mistakenly disseminated, the Court is mindful that by taking additional 
steps to minimize the rétention of such information, NSA would also be reducing the Hkelihood 
that it might be disseminated when the govemment has no foreign intelligence need to do so. 
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minimization procédures are reasonably designed to "prohibât fhe dissémination)] of nonpublicly 

available information concerning unconsenting United States persons consistent with the need of 
the United States to . . , disseminate foreign intelligence information." See 50 U.S.C, 
§ 1801(k)(iy 2 



The fmal question for the Court is whether the targeting and minimization procédures are, 

as applied to upstreani collection that includes MCTs, consistent with the Fourth Amendment 

See50U.S.C.§ 1881a(i)(3)(A)-(B), The Fourth Amendment provides; 

The right of the people to be secure m their persons, houses, papers, and 
effects, against xinreasonable searches and seizures» shall not be violated, and no 
Warrants shall issue, but upon probable cause, supported by Oath or affirmation, 
and particularly describing the place to be searched, and the persons or things to 
be seized. 

The Court has assumed in the prior Section 702 Dockets that at least in sonie 
circuinstances, account holders hâve a reasonable expectation of privacy in electronic 
communications, and hence that the acquisition of such communications can resuit in a "search" 
or "seizure" within the meaning of the Fourth Amendment. geg, êigt 3 Docket No. HH^^H 




62 The Court further concludes that the NSA minimization procédures, as the government 
proposes to appiy them to MCTs ? satisfy the requirements of 50 U.S.C, §§ 1801(h)(2>(3) and 
1821(4)(B)-(C). See supra, note 59 (discussing 50 U.S.C. §§ 1 801 (h)(2) & 1821 (4)(B)). The 
requirements of 50 U.S.C, §§ 1801(h)(4) and 1821(4)(D) are- inapplicable here. 



4 



NSA" S Targeting and Minimization Procédures Do Not, as 
Applied to Upstream Collection that Includes MCTs» Satisfy the 
Requirements of the Fourth Amendment , 





The government accepts the proposition that the acquisition of 
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electronic communications can resuit in a "search" or "seizure" uiider the Fourth Amendment 

See Sept. 7, 201 1 Hearing Tr. at 66. Indeed, the government has acknbwledged in prior Section 
702 matters fhat the acquisition of communications fiom facilities used by United States persons 
located outside the United States "must be in conformity with the Fourth Amendaient," Docket 

NosH^^H^^HH^^H^^^^^HHIHHiHHHi^^^^^^H< Thesameistrue 
of the acquisition of communications from facilities used by United States persons and others 
within the United States, figfi United States y. Verdugo-Urquidez . 494 U,S + 259, 271 (1990) 
(recognizing fhat "aliens receive constitutional protections when they have corne within the 
tenïtory of the United States and developed substantial connections with this country"). 
a. The Warrant Requirement 
The Court has previously concluded that the acquisition of foreign hitelligence 
information pursuant to Section 702 falls within the "foreign intelligence exception" to the 
warrant requirement of the Fourth Amendment jSeg Docket No, flH^^^^^HHIHil 
HH^H' T^ 16 govemment's récent révélations regardingNSA's acquisition of MCTs 
do not alter that conclusion. To he sure* the Court now understands that, as a resuit of the 
transaction! nature of the upstream collection, NSA acquires a substantially larger number of 
communications of or concerning United States persons and persons inside the United States 
than previously understood, Nevertheless, the collection as a whole is still directed atlj^H 



[ conducted for the purpose of national security - a 
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propose going " ( well beyond any garden-variety law enfoncement objective."* £ee 14 (quoting 

fore Directives, DocketNo, 08-01, Opinion at 16 (FISA Ct. Rev, Aug, 22, 2008) (hereinafter 

" In re Directives ")*), 6 * Further, it remains true that the collection is undertaken in circumstances 

in which there is a "'high degree of probability that requiring a warrant would liinder the 

government' s ability to collect time-sensitive information and, thus, would impede the vital 

national security interests that are at stake.'*' Id, at 36 (quoting In re Directives at 18), 

Accordingly, the government's révélation that NSA acquires MCTs as part of its Section 702 

upstream collection does not disturb the Court 5 s prior conclusion that the government is not 

required to obtain a warrant before conducting acquisitions underNSA's targeting and 

minimizatiott procédures, 

b, Reasonabkness 

The question therefore becomes whether, taking into accountNSÀ's acquisition and 

proposed handling of MCTs, the agency's targeting and minimization procédures are reasonable 

under the Fourth Amendaient As the Foreign Intelligence Surveillance Court of Review ("Court 

of Review") has explained, a court assessing reasonableness in tins context must consider "the 

nature of the government intrusion and how the government intrusion is implemented. The more 

important the government' s interest, the greater the intrusion that may be constitutionally 



63 A redacted, de-classifzed version of the opinion in In re Directives is published at 551 
F,3d 1004. The citations herein are to the unredacted, classified version of the opinion, 
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tolerated." In re Directives at 19-20 (citations omitted), quoted in Docket No| 

The court must therefore 

balance the interests at stake, If the protections that are in place for individual 
privacy interests are sufficient in light of the government interest at stake, the 
constitutional scales will tilt in favor of upholding the government' s actions. If, 
however, those protections are insufficicnt to alleviate the risks of government 
error and abuse 3 the scales will tip toward a fmding of unconstitutionality. 

kl at 20 (citations omitted), quoted in Docket No|||^|^H^^^^BHIHHHHI> 

In conducting this balanchg, the Court must consider the "totality of the circumstances," IcL at 
19. Given tlie all-encompassing nature of Fourfh Amendment reasonableness review, the 
targeting and minimization procédures are most appropriately considered collectively, gee 
Docket No. ■^■■■■■IHBHHHHHH (following the same approach).^ 1 

The Court has previously recognized that the government's national security interest in 
conducting acquisitions pursuant to Section 702 "'is of the highest order of magnitude/" Docket 
No* HHHI^^^^^^HHII^^HHl (quoting In re Directives at 20). The Court has 
fuither accepted the government's représentations that NSA's upstream collection is "'uniquely 
capable of acquiring certain types of targeted communications containing valuable foreign 
intelligence information, J,> Docket No. |H^IH^HHI^^Hfl!iH^H (quoting 



64 Reasonableness review under the Fourth Amendaient is broader thaii the statutory 
assessment previously addressed, which is necessarily limited by the terms of the pertinent 
provisions of FISA. 
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government filing), There is no reason to believe that the collection of MCTs results in the 
acquisition of less foreign intelligence information than the Court previously understood. 

Nevertheless, it must be noted that NSA's upstream collection makes up only a very 
small fraction of the agences total collection pursuant to Section 702. As explained above s the 
collection of téléphone communications under Section 702 is not implicated at ail by the 
governmenf s récent disclosures regardingNSA's acquisition of MCTs, Nor do those disclosures 
affect NSA's collection of Internet communications directly from Internet service providers m 




communications acquired by NSA each year under Section 702. gee Aug> 16 Submission at 
Appendix A, And the government recently advised that NSA now has the capability, at the time 
of acquisition to iclentify approximately 40% of its upstream collection as constituting discrète 
communications (non-MCTs) that are to, from, or about a targeted selector. See id. at 1 n,2. 
Accordingly, only approximately 5.4% (40% of 9%) of NSA's aggregate collection of Internet 
communications (and an even smailer portion of the total collection) under Section 702 is at 
issue hère. The national security interest at stafce must be assessed bearing thèse numbers in 
mind, 

The government's récent disclosures regarding the acquisition of MCTs most directly 
affect the privacy side of the Fourth Amendaient balance, The Couifs prior approvals of the 
targeting and minimization procédures rested on its conclusion that the procédures "reasonably 
confine acquisitions to targets who are non~U,S. persons outside the United States/' Avho thus 





L which accounts for approximately 91% of the Internet 
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"are not protected by the Fourth Amendment " Docket No ^^^^HI^H^H 

HHH The Court' s approvals also rested upon the understanding that acquisitions under the 

procédures "will intrude oti interests protected by the Fourth Amendment only to the extent that 

(1) despite the opération of the targeting procédures, US, persons, or persons actually in the 

United States, are mistakenly targeted; or (2) U,S, persons, or persons located in the United 

States > are parties to communications to or fiom tasked selectors (or, in certain circumstances, 

communications that contain a référence to a tasked selector)," 14. at 38. But NSA' s acquisition 

of MCTs substantially broaclens the circumstances in which Fourth Amendment-protected 

interests are intmded upon by NSA's Section 702 collection, Until now, the Court bas not 

considered thèse acquisitions in its Fourth Amendment onalysis* 

Both in ternis of its size and its nature, the intrusion resulting from NSA's acquisition of 

MCTs is substantial The Court now understands that each year, NSA' s upstream collection 

lilcely resuits in the acquisition of roughly two to ten thousand discrète wholly domestic 

communications that are neither to, ûom ? nor about a targeted selector, as well as tens of 

thousands of other communications that are to or from a United States person or a person in the 

United States but that are neither to ? from, nor about a targeted selector, 65 In arguing that NSA' s 



65 As discussed eatlier, NSA also likely acquires tens of thousands of discrète, wholly 
domestic communications that are "about" a targeted facility. Because thèse communications are 
reasonably likely to contain foreign intelligence information and thus, generally speaking, serve 
the government's foreign intelligence needs, they do not présent the same Fourth Amendment 
concerns as the non-farget communications discussed here, See supra , note 53. 
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targeting and minimization procédures satisfy fhe Fourth Amendment notwithstanding the 

acquisition of MCTs, the goveniment stresses that the number of protected communications 
acquired is relatively small in comparisonto the total number of Internet communications 
obtained by NSA through its upstream collection, That is true enough, given the enormous 
volume of Internet transactions acquired by NSA through its upstream collection (approximately 
26.5 million annually)» But the mimber is small only in that relative sensé. The Court recognizes 
that the ratio of non-target 3 Fourth Amendment-protected communications to the total number of 
communications must be considered in the Fourth Amendment balancing. But in conducting a 
review under the Constitution that requires considération of the totality of the circumstances, see 
Inre Directives at 1% the Court must also take into account the absolute number of non-target, 
protected communications that are acquired. In absolute terms, tens of thousands of non-target, 
protected communications annually is a very large number. 

The nature of the intrusion at issue is also an important considération in the Fourth 
Amendment balancing. See, e^, Board of Educ, v, Earis . 536 U.S. 822, 832 (2002); Vemonia 
Sch, Dist 47Jv, Acton , 515 U.S. 646, 659 (1995). At issue here are the Personal j^HBB 
communications of US. persons and persons in the United States, A person's "papers" are 
among the four items that are specifically listed in the Fourth Amendment as subject to 
protection against unreasonable search and seizure. Whether they are transmitted by letter, 
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téléphone or e-mail, a person's private communications are aldn to personal papers. ùideed, the 
Suprême Court has held that the parties to téléphone communications and the senders and 
récipients of written communications generally have a reasonable expectation of privacy in the 
contents of those communications, See Katz , 389 U>S. at 352; United States v, United States 
Dist, Ct, flCeith) , 407 U.S. 297, 313 (1972); United States v, Jacobsem 466 U.S, 109, 114 (1984), 
The intrusion resulting ftom the interception of the contents of electronic communications is, 
generally speaking, no less substantiai. 66 

The government stresses that the non-target communications of concern here (discrète 
wholly dornestic communications and other discrète communications to or ftom a United States 
persan or a person in the United States that are neither to 5 from, nor about a targeted selector) are 
acquired incidentally rather than purposefully, Bm June 28 Submission at 13-14, Insofar as 
NSA acquires entire MCTs because it lacks the technical means to limit collection only to the 
discrète portion or portions of each MCT that contain a référence to the targeted selector, the 
Court is satisiïed that is the case. But as the government correctly recognizes, the acquisition of 
non-target information is not necessarily reasonable under the Fourth Amendment simply 



65 Of course, not every interception by the government of a personal communication 
results in a "search" or "seizure" within the meaning of the Fourth Amendment. Whether a 
pailicular intrusion constitutes a search or seizure dépends on the spécifie facts and 
circumstances involved. 
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because its collection is incidental to the propose of the search or surveillance, See içL at 14. 
Hiere surely are circonstances in which incidental intrusions can be so substantial as to render a 
search or sekure unreasonable, To use an extrême example, if the only way for the govemtnent 
to obtain communications to or from a particular targeted fl^HIIH required also acquiring 
ail communications to or from every other Hfl^HR, such collection would certainly raise 
veiy serious Fourth Amendment concerns. 

Here ? the quantity and nature of the information fhat is "incidentally" collectée! 
distinguishes this matter ftom the prior instances in which this Court and the Court of Review 
have considered incidental acquisitions. As explained above, the quantity of incidentally- 
acquired, non-target» protected communications being acquired by NSA through its upstream 
collection is, in absolute ternis, very large, and the resulting intrusion is, in each instance, 
Hkewise very substantiel. And with regard to the nature of the acquisition, the goverament 
acknowledged in a prior Section 702 docket tfaat the term "incidental interception" is "most 
commonly understood to refer to an intercepted communication between a target using a fecility 
subject to surveillance and a fhird party using a factlity not subject to surveillance " Docket Nos. 

This is the soit of 

acquisition that the Court of Review was addressing in In re Directives when it stated that 
"incidental collections occurring as a resuit of constitutionallypermissible acquisitions do not 
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render those acquisitions unlawful," In re Directives at 30. But hère, by contrast, the incidental 

acquisitions of concern are not direct communications between a non-target thîrd party and the 

user of the targeted facility, Nor are they the communications of non-targets that refer dhectly to 

a targeted selector, Rather> the communications of concern hère are acquired simply because 

they appear somewhere in the same transaction as a soparatc communication that is to, fiom, or 

about the targeted faoility, 67 

The distinction is sîgnifîcant and impacts the Fomth Amendment balancing, À discrète 

communication as to which the user of the targeted facility is a party or in which the targeted 



67 The Court of Review plainly limited its holding regarding incidental collection to the 
facts before it See In re Directives at 30 f" Qn thèse facts , incidentally collected communications 
of non-targeted United States persons do not violate the Fourth Amendment") (emphasis added). 
Tlie dispute in In re Directives involved the acquisition by NSA of discrète to/from 
communications ûom an Internet Service Provider, notNSÀ's upstream collection of Internet 
transactions. Aceordingly, the Court of Review had no occasion to considerNSA's acquisition 
of MCTs (or even "about" communications* for that matter), Furthermore, the Court of Review 
noted that "[t]he govemment assures us that it does not maintain a database of incidentally 
collected information ûom non-targeted United States persons, and there is no évidence to the 
contrary." Id. Here, however, the govemment proposes measures that will ailow NSA to retain 
non-target United States person information in its databases for at least five years, 

The Title III cases cited by the government (see June 28 Submîssion at 1445) are 
likewise distinguishable. Abraham v, Countv of Greenville . 237 F.3d 386, 391 (4th Ch. 2001), 
did not involve incidental overhears at ail The others involved allegedly non-pertinent 
communications to or fiom the facilities for which wiretap authorization had been granted 3 rather 
than communications to or ftom non-targeted facilities, j§g£ Scott v, United States . 436 U,S* 
128, 130-31 (1978), United States v, McKinnon . 721 R2d 19, 23 (lst Ch\ 1983), and United 
States v. DoolittK 507 F.2d 1368, 1371, afiFd en banc, 518 F.2d 500 (5th Cir, 1975). 



-TOT SE CIl ET //C ORnNT/ / Q ReON ! NQgaB^ 



Page 76 



(b)(1), (b)(3) 



—TOP S E CRET//COa(QNT//ORCQN ? NQFORN 

facility is mentioned is much more likely to contain foreign intelligence information than is a 

separate communication that is acquired simply because it happens to be within the same 
transaction as a communication involving a targeted faollity, Hence, the national security need 
for acquiring, retaining ? and disseminating the former category of communications is greater than 
•fixe justification for acquiring, refaining, and disseminating the latter form of communication» 

The Court of Review and this Court have recognized that the procédures goveming 
rétention, use 3 and dissémination bear on the reasonableness under the Fourth Àmendment of a 
program for collecting foreign intelligence information, gee In re Directives at 29-30; Docket 
No, ^^^^^^^I^^^^^^^^Hfl^^^H As explained in the discussion of NSA' s 
minimization procédures above, the measures proposed by NSA for handling MCTs tend to 
maximize 5 rather than minimize, the rétention of non-target information,, including information 
of or concerning United States persons, Instead of requiring the prompt review and proper 
disposition of non-target information (to the extent it is feasible to do so)> NSÀ's proposed 
measures focus almost exclusively on those portions of an MCT that an analyfît décides, after 
review, that he or she wishes to use, An analyst is not required to détermine whether other 
portions of the MCT constitute discrète communications to or from a United States person or a 
person in the United States, or contain information concerning a United States person or person 
inside the United States, or ? having made such a détermination, to do anything about it, Only 
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those MCTs that are immediately recognized as oontaining a wholly domestic discrète 

communication are purged, while other MCTs remain in NSA' s repositories for five or more 

years, without being marked as MCTs. Nor> if an MCT contains a discrète communication of, or 

other information concerning, a United States person or person in the United States, is the MCT 

marked as such. Accordingly^ each analyst who retrieves an MCT and wishes to use a portion 

thereof is left to appiy the proposed minimization measures alone, from beginning to end s and 

without the benefit of his colleagues' prior review and analysis, Given the limited review of 

MCTs that is requit ed, and the difficulty of the task of identtfying protected information within 

an MCT, the goveminenfs proposed measures seem to enhaïice, rather than reduce, the risk of 

errer, oveiTetention, and dissémination of non-target information, including infoiTaation 

protected by the Fourth Atnendment. 

In sum, NSA's collection of MCTs results in the acquisition of a very toge number of 

Fourth Amendment-protected communications that have no direct connection to any targeted 

facility and thus do not serve the national security needs underlying the Section 702 collection as 

a whole, Rather than attempting to identify and segregate the non-target, Fourth-Amendment 

protected information promptly following acquisition, NSA's proposed handling of MCTs tends 

to maximize the rétention of such information and hence to enhance the risk that it will be used 

and disseminated. Under the totallty of the circumstances, then, the Court is unable to find that 
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fhe government's proposée! application of NSA's targeting and mmimization procédures to 

MCTs is consistent v/ith the requirements of the Fourth Amendment The Court does not 
foreclose the possibility that fhe government might be able to tailor the scope of NSA's upstream 
collection, or adopt more stringent post-acquisition safeguards, in a marner that would satisfy the 
reasonableness requirement of the Fourth Amendment 68 

V, CONCLUSION 

For the foregoing t casons, the government's requests for approval of the certifications 
and procédures contained in the April 201 1 Submissions are granted in part and denied in part. 
The Court concludes that one aspect of the proposed collection - the "upstream collection" of 
Internet transactions contaming multiple communications,, or MCTs - is, in some respects, 
déficient on statutory and constitutional grounds. Specifically, the Court finds as follows: 

1, Certifications I^HH^HHiHHIl and (lie amendments to the Certifications 
in the Prior 702 Dockets, contain ail the required éléments; 



68 As the government notes, geç June 1 Submission at 1849, the Suprême Court lias 
"repeatedly refused to déclare that only tlie € least întrusive 9 search practicable can be reasonable 
uuder the Fourth Amendment" City of Ontario y, Quom — US, — 130 S- Ct 2619, 2632 
(2010) (citations and internai quotation marks omitted). The foregoing discussion should not be 
understood to suggest otherwise, Rather, the Court holds only that the means actually chosen by 
the government to accomplish its Section 702 upstream collection are, with respect to MCTs, 
excessively intrusive in light of the putpose of the collection as a whole, 
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% As applied to téléphone communications and discrète Internet communications that 
are to or from a facility tasked for collection, to non-MCT "about" communications fallhg 
within tkfH catégories previously described by the govemment, 69 and to MCTs as to which the 
"active user" is known to be a tasked selector, the targeting and minimization procédures adopted 
in accoïdance with 50 U.S.C. § 1881a(d)-(e) are consistent with the requirements of those 
subsections and with the Fourth Amendment to the Constitution of the United States; 

3 . NS A's targeting procédures, as the govemment proposes to implement them in 
connection with the acquisition of MCTs, meet the requirements of 50 U.S.C, § 1881a(d); 

4. NSÀ's mhiimization procédures, as the government proposes to apply them to MCTs 
as to which the "active user" is not known to be a tasked selector, do not meet the requirements 
of 50 U.S.C, § 1 881a(e) with respect to rétention; and 

5. NSA's targeting and minimization procédures, as the govemment proposes to apply 
them to MCTs as to which the "active user" is not known to be a tasked selector, are inconsistent 
with the requirements of the Fourth Amendaient, 



69 SeeDocketNo.l 
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Orders approving the certifications and amendments in part are being entered 

contemporaneously herewith. 

ENTERED thîs 3rd day of October, 2011, 




MHND. BATES 

Judge, United States Poreign 
Intelligence Surveillance Court 
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UNITED STATES 
FOREIGN INTELLIGENCE SURVEILLANCE COURT 
WASHINGTON, D.C. 




ORDER 



Thèse matters are before the Court on: (1) the "Government' s Ex Parte Submission of 

Reauthorization Certification and Related Procédures, Ex Parte Submission of Amended i 

j 

Certifications, and Request for an Order Approving Such Certification and Amended ! 



Certifications" for DNI/AG 702(g) Certifications 




which was filed 



! 
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on April 20, 2011; (2) the "Govemmenf s Ex Parte Submission of Reauthorization Certification 
and Related Procédures, Ex Parte Subniission of Amended Certifications, and Request for an 
Order Approving Such Certification and Amended Certifications" for DNI/AG 702(g) 
Certifications immm^^^^ which was filed on April 22, 2011; and (3) 
the "Government's Ex Parte Submission of Reauthorization Certification and Related 
Procédures, Ex Parte Submission of Amended Certifications, and Request for an Order 
Approving Such Certification and Amended Certifications" for DNI/AG 702(g) Certifications 

HIH^^^^^^^^IH^H' which Wûs a - so flled on A P ril 22 > 201 1 (collcclively, the 
"April 2011 Submissions"), 

Through the April 201 1 Submissions, the govemment seeks approval of the acquisition of 

certain téléphone and Internet communications pursuant to Section 702 of the Foreign 

Intelligence Surveillance Act ("FISA" or the "Act"), 50 U.S.C. g 1881a, which requires judicial 

review for compliance with both statutory and constitutional requîrements. For the reasons set 

forth in the accompanying Mémorandum Opinion* the government's requests for approval are 

granted in part and denied in part The Court concludes that one aspect of the proposed 

collection - the "upstream collection" of Internet transactions containing multiple 

communications, or "MCTs" - is, in some respects, déficient on statutory and constitutional 

grounds. Specifically, the Court finds as follows: 

1. DNI/AG 702(g) C^^^^^I^III^HIHIIH as wel1 as the 
amendments to the ofher certifications lîsted above and contained in the April 201 1 Submissions, 
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contain ail the required éléments; 

2, As applied to téléphone communications and discrète Internet communications that 
are to or from a facility tasked for collection, to non-MCT "about" communications fallmg 
witWntJie ^catégories previously described by the government, 1 and to MCTs as to which the 
"active user" is known to be a tasked selector, the targeting and minimization procédures adopted 
in accordance with 50 U.S.C. § 1881a(d)-(e) are consistent witli the requirements of those 
subsections and with the Fourth Amendaient to the Constitution of the United States; 

3, NSA' s targeting procédures, as the government proposes to implement them in 
connection with the acquisition of MCTs, meet the requirements of 50 US.C, § 1881a(d); 

4, NSA's minimization procédures, as the government proposes to apply them to MCTs 
as to which the "active user" is not known to be a tasked selector, do not meet the requirements 
of 50 U,S*C* § 1 881a(e) with respect to rétention; and 

5, NSÀ*s targeting and minimization procédures, as the government proposes to appiy 
them to MCTs as to which the "active user" is not known to be a tasked selector 3 are inconsistent 
with the requirements of the Fourth Amendment, 

Accordingly, pursuant to 50 U.S.C. § 1881a(i)(3)(B) s the government shall, at its élection: 
(a) not later than 30 days fiom the issuance of this Order, correct the deficiencies 
identifîed in the accompanying Mémorandum Opinion; or, 

1 See DocketNo, 702(i>08-01, Sept. 4, Mémorandum Opinion at 17-18 a 14, 
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(b) cease the implementatkm of the Certifications insofar as they permit the acquisition of 
MCTs as to ^which the "active user" is not known to be a tagked selector. 

ENTERED thïs 3rd day of Gctober, 201 1, at 'H-E astern Time. 

)HND. BATES 
Judge, United States Foxeign 
Intelligence Surveillance Court 
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